Cisco HyperFlex HX240c AF M5 Firmware 3.5(2a)
Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:hyperflex_hx240c_af_m5_firmware:3.5\(2a\):*:*:*:*:*:*:*
part: o version: 3.5(2a) update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Hyperflex Hx240C Af M5 Firmware (da6feb49-41b8-542e-95c2-a101a8de8253) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-12621 |
vulnerable | 2026-06-08 05:12:39.434712 |
Cisco HyperFlex Static SSL Key Vulnerability
MEDIUM (6.8)
A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker could exploit this vulnerability by obtaining a specific encryption key for the cluster. A successful exploit could allow the attacker to perform a man-in-the-middle attack against other nodes in the cluster.
Published: 2019-08-21T18:00:28.606Z
Updated: 2024-11-20T17:12:58.199Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12620 |
vulnerable | 2026-06-08 05:12:39.430374 |
Cisco HyperFlex Software Counter Value Injection Vulnerability
MEDIUM (5.3)
A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is due to insufficient authentication for the statistics collection service. An attacker could exploit this vulnerability by sending properly formatted data values to the statistics collection service of an affected device. A successful exploit could allow the attacker to cause the web interface statistics view to present invalid data to users.
Published: 2019-09-18T16:15:18.927Z
Updated: 2024-11-19T18:57:00.555Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.