---
id: 5118
title: "Cisco Hyperflex: How We Got RCE Through Login Form and Other Findings"
source_domain: swarm.ptsecurity.com
source_url: "https://swarm.ptsecurity.com/cisco-hyperflex-how-we-got-rce-through-login-form-and-other-findings/"
published_at: "2021-09-29T13:57:28Z"
tags: ["rce", "vulnerability-research", "cve", "cisco", "command-injection"]
phying_url: "https://phying.com/item/5118"
lang: en
---

# Cisco Hyperflex: How We Got RCE Through Login Form and Other Findings

## Summary

An assessment of Cisco HyperFlex HX that found three vulnerabilities: command injection in the installer VM (CVE-2021-1497, CVSS 9.8) and the data platform (CVE-2021-1498), plus a file upload flaw (CVE-2021-1499) — including RCE reached through the login form.

## Intelligence Metadata

- **Sources:** swarm.ptsecurity.com
- **Published:** 2021-09-29T13:57:28Z
- **Original:** https://swarm.ptsecurity.com/cisco-hyperflex-how-we-got-rce-through-login-form-and-other-findings/
- **Phying News:** https://phying.com/item/5118