CVE-2021-1498
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Published:May 6, 2021
Last Modified:Oct 28, 2025
EPS:May 6, 2021
EPSS Score:0.94012
CVSS Score:9.8
CISA Notification
Description
Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Required Action:
Apply updates per vendor instructions.
Notes:
No extra notes provided.
Due Date
Nov 17, 2021
1759 days ago
Alert Date
Nov 3, 2021
1773 days ago
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Hyperflex Hx220c Af M5
Cisco
Hyperflex Hx220c Af M5
Vendor
Cisco
Product
Hyperflex Hx220c All Nvme M5
Cisco
Hyperflex Hx220c All Nvme M5
Vendor
Cisco
Product
Hyperflex Hx220c Edge M5
Cisco
Hyperflex Hx220c Edge M5
Vendor
Cisco
Product
Hyperflex Hx220c M5
Cisco
Hyperflex Hx220c M5
Vendor
Cisco
Product
Hyperflex Hx240c
Cisco
Hyperflex Hx240c
Vendor
Cisco
Product
Hyperflex Hx240c Af M5
Cisco
Hyperflex Hx240c Af M5
Vendor
Cisco
Product
Hyperflex Hx240c M5
Cisco
Hyperflex Hx240c M5
Vendor
Cisco
Product
Hyperflex Hx Data Platform
Cisco
Hyperflex Hx Data Platform
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
