Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| HyperFlex HX | Versions not published yet (product named by CISA KEV) | |
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free