Cisco HyperFlex HX Data Platform Command Injection Vulnerability
Cisco · HyperFlex HX
Date added (CISA)
2021-11-03
Remediation due
2021-11-17
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.