Cisco HyperFlex HX-Series

13 results · Feed

• Medium 5.3
  CVE-2019-12620

  Cisco HyperFlex Software Counter Value Injection Vulnerability

  A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics colle…

  Cisco Cisco HyperFlex HX-Series Network devices
  Sep 18, 2019
• Medium 6.5
  CVE-2019-1975

  Cisco HyperFlex Software Cross-Frame Scripting Vulnerability

  A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This vulnerability is due to insufficient HTML iframe protection. An …

  Cisco Cisco HyperFlex HX-Series Network devices
  Sep 18, 2019
• Medium 6.8
  CVE-2019-12621

  Cisco HyperFlex Static SSL Key Vulnerability

  A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker could exploit this vulnerability by obtaining a specific en…

  Cisco Cisco HyperFlex HX-Series Network devices
  Aug 21, 2019
• Medium 5.4
  CVE-2019-1958

  Cisco HyperFlex Software Cross-Site Request Forgery Vulnerability

  A vulnerability in the web-based management interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. The vulnerability is due to insufficient CSRF protec…

  Cisco Cisco HyperFlex HX-Series Network devices
  Aug 8, 2019
• Medium 6.1
  CVE-2019-1857

  Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability

  A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is …

  Cisco Cisco HyperFlex HX-Series Network devices
  May 3, 2019
• Medium 4.0
  CVE-2019-1667

  Cisco HyperFlex Arbitrary Statistics Write Vulnerability

  A vulnerability in the Graphite interface of Cisco HyperFlex software could allow an authenticated, local attacker to write arbitrary data to the Graphite interface. The vulnerability is due to insufficient authorization controls. An attacker could exploit th…

  Cisco Cisco HyperFlex HX-Series Network devices
  Feb 21, 2019
• Medium 5.3
  CVE-2019-1666

  Cisco HyperFlex Unauthenticated Statistics Retrieval Vulnerability

  A vulnerability in the Graphite service of Cisco HyperFlex software could allow an unauthenticated, remote attacker to retrieve data from the Graphite service. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vu…

  Cisco Cisco HyperFlex HX-Series Network devices
  Feb 21, 2019
• High 8.1
  CVE-2019-1664

  Cisco HyperFlex Software Unauthenticated Root Access Vulnerability

  A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this …

  Cisco Cisco HyperFlex HX-Series Network devices
  Feb 21, 2019
• Medium 4.7
  CVE-2019-1665

  Cisco Hyperflex Stored Cross-Site Scripting Vulnerability

  A vulnerability in the web-based management interface of Cisco HyperFlex software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vu…

  Cisco Cisco HyperFlex HX-Series Network devices
  Feb 21, 2019
• High 8.8
  CVE-2018-15380

  Cisco HyperFlex Software Command Injection Vulnerability

  A vulnerability in the cluster service manager of Cisco HyperFlex Software could allow an unauthenticated, adjacent attacker to execute commands as the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this vulner…

  Cisco Cisco HyperFlex HX-Series Network devices
  Feb 20, 2019
• Unscored —
  CVE-2018-15407

  Cisco HyperFlex World-Readable Sensitive Information Vulnerability

  A vulnerability in the installation process of Cisco HyperFlex Software could allow an authenticated, local attacker to read sensitive information. The vulnerability is due to insufficient cleanup of installation files. An attacker could exploit this vulnerab…

  Cisco Cisco HyperFlex HX-Series Network devices
  Oct 5, 2018
• Unscored —
  CVE-2018-15382

  Cisco HyperFlex Software Static Signing Key Vulnerability

  A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to generate valid, signed session tokens. The vulnerability is due to a static signing key that is present in all Cisco HyperFlex systems. An attacker could exploit th…

  Cisco Cisco HyperFlex HX-Series Network devices
  Oct 5, 2018
• Unscored —
  CVE-2018-15423

  Cisco HyperFlex UI Clickjacking Vulnerability

  A vulnerability in the web UI of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to affect the integrity of a device via a clickjacking attack. The vulnerability is due to insufficient input validation of iFrame data in HTTP requests …

  Cisco Cisco HyperFlex HX-Series Network devices
  Oct 5, 2018