H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2021-1498

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.

Vulnerability
TypeVulnerability
External ID—
First seen2021-11-03
Last seen2021-11-03

Confidence

—

Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.

Labels

exploitedkev

CISA KEV context

Vendor / productCisco HyperFlex HX
Added2021-11-03
Due date2021-11-17
6 recorded

Relationships

mitigates
from Remediate CVE-2021-1498
Mitigation
related-to
to Argument Injection
Technique
related-to
to Command Delimiters
Technique
related-to
to Command Line Execution through SQL Injection
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to OS Command Injection
Technique
2 external

References

nvd
CVE-2021-1498
open
cwe
CWE-78
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance