November 3, 2021 · Applied Cybernetics Group
CVE-2021-1497 — Cisco HyperFlex HX
Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability
- Added to KEV
2021-11-03- Federal due date
2021-11-17- Vendor
- Cisco
- Product
- HyperFlex HX
- EPSS
- 100.0th percentile (score 0.999, as of
2026-07-13) - NVD CVSS v3.1
- —
- Ransomware use
- Unknown
- ATT&CK
- T1059 , T1133 · signal rollup
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2021-1497
CISA short description
Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.
Required action
Apply updates per vendor instructions.