Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2019-12621

Cisco HyperFlex Static SSL Key Vulnerability

Description

A vulnerability in Cisco HyperFlex Software could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack. The vulnerability is due to insufficient key management. An attacker could exploit this vulnerability by obtaining a specific encryption key for the cluster. A successful exploit could allow the attacker to perform a man-in-the-middle attack against other nodes in the cluster.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco HyperFlex HX-Series

  • unspecified to < 4.0(1a)affected

References