November 3, 2021 · Applied Cybernetics Group
CVE-2021-1498 — Cisco HyperFlex HX
Cisco HyperFlex HX Data Platform Command Injection Vulnerability
- Added to KEV
2021-11-03- Federal due date
2021-11-17- Vendor
- Cisco
- Product
- HyperFlex HX
- EPSS
- 99.9th percentile (score 0.942, as of
2026-06-08) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2021-1498
CISA short description
Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.
Required action
Apply updates per vendor instructions.