Cisco HyperFlex HX220C Edge m5 Firmware vulnerabilities

3 CVEs affecting Cisco HyperFlex HX220C Edge m5 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1975, published 2019-09-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-1975, published 2019-09-18. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web-based interface of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to execute a cross-frame scripting (XFS) attack on an affected device. This…
CVE-2019-12620, published 2019-09-18. Medium severity, CVSS 5.3. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability in the statistics collection service of Cisco HyperFlex Software could allow an unauthenticated, remote attacker to inject arbitrary values on an affected device. The vulnerability is…
CVE-2019-12621, published 2019-08-21. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker…