Product: Cisco Integrated Management Controller (IMC)
Summary
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An attacker could exploit this vulnerability by persuading a user to click a crafted link, potentially capturing user credentials.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-20317 |
Exploitation
To exploit this vulnerability, an attacker must persuade a user to click on a specially crafted link that redirects them to a malicious website. This requires user interaction, as the attack is not possible without the user’s consent to click the link.
Affected Products
- Cisco Integrated Management Controller (IMC) – Affected by the vKVM vulnerability, allowing potential redirection to malicious sites.
- Cisco UCS Manager – Includes the affected vKVM client, making it susceptible to the same exploit.
Mitigation
To mitigate this vulnerability, users should be cautious about clicking on links from untrusted sources and ensure that their systems are updated with the latest security patches from Cisco. Additionally, implementing security awareness training can help users recognize potential phishing attempts.