{"schema_version":"1","data":[{"id":3525,"advisory_id":"bee1a57f-ad38-494e-9325-d80812742b1b","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-1497","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:36:27.762346+00:00","extraction_method":"structured","technologies":["core-kev","hyperflex-hx"],"cve_ids":["CVE-2021-1497"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","summary":"Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-1497","products":[{"name":{"value":"HyperFlex HX","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-1497","aliases":["CVE-2021-1497"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-78"],"cveID":"CVE-2021-1497","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1497","dueDate":"2021-11-17","product":"HyperFlex HX","dateAdded":"2021-11-03","vendorProject":"Cisco","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the root user.","vulnerabilityName":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-1497","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3525,"next_before":3525}