Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited

CVE-2021-1497

Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

Description

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 17 Nov 2021.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.