Live › vulnerability › CVE-2021-1497
Go to dashboardCisco HyperFlex HX Installer Virtual Machine has an input validation flaw that lets an attacker run commands on the device. The commands run as root, and CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Cisco HyperFlex HX | vendor | – | – |
Identify any HyperFlex HX Installer Virtual Machine in your environment and confirm its Cisco version against the advisory.
Apply the Cisco updates per the vendor instructions named in the CISA KEV entry.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
This page as .md · .json · in your agent: get_signal("CVE-2021-1497")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.