VULNERABILITY INTELLIGENCE

CVE-2021-1498

CVSS score9.8 CRITICAL

EPSS probability100.00%

CISA KEVKnown exploited vulnerability

Published2021-05-06

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Cisco HyperFlex HX Data Platform Command Injection Vulnerability

Vendor / product: Cisco / HyperFlex HX

Description

Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Weakness classification

psirt@cisco.com: CWE-78
nvd@nist.gov: CWE-77

Primary references

psirt@cisco.com — Exploit, Third Party Advisory, VDB Entry
psirt@cisco.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource