HC3 Sector Alert TLP White: Cisco HyperFlex HX RCE Vulnerabilities

On May 5, 2021 Cisco advisories disclosed multiple vulnerabilities in their products. These vulnerabilities could allow an unauthorized user to execute arbitrary code, escalate privileges and gain access to sensitive information. Many of these vulnerabilities had a severity rating of either high or critical and the technologies are known to be used in healthcare. These vulnerabilities should be carefully considered for patching by any healthcare organization with special consideration to each vulnerability criticality category against the risk management posture of the organization.

For additional details, please see the attached report here.

For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:

John Riggi

Senior Advisor for Cybersecurity and Risk, AHA

jriggi@aha.org

(O) +1 202 626 2272