CVE-2019-1664

CVE-2019-1664 is a high-severity vulnerability in Cisco HyperFlex Software releases prior to 3.5(2a) that allows an unauthenticated, local attacker to gain root access to all nodes in a HyperFlex cluster. This flaw stems from insufficient authentication controls within the hxterm service. An attacker could exploit this by connecting to the service as a non-privileged local user, leading to complete compromise of the cluster. The vulnerability has a CVSS score of 7.8 (HIGH), indicating a low attack complexity and requiring local access with low privileges, but resulting in high impacts to confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV listed as No), there is no public exploit code available in Metasploit, Nuclei, or ExploitDB. Despite the lack of public exploit code, the vulnerability has garnered some community discussion and media coverage, with one article from SecurityWeek highlighting Cisco's patch release. Its EPSS score is low, suggesting a low probability of exploitation in the wild.