CVE-2021-1497 — Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability

CISA KEV listed Added November 3, 2021 Remediate by November 17, 2021

Description

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2021-1497

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer