A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An attacker could exploit this vulnerability by persuading a user to click a crafted link, potentially capturing user credentials.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-20317 |
Exploitation
To exploit this vulnerability, an attacker must persuade a user to click on a specially crafted link that redirects them to a malicious website. This requires user interaction, as the attack relies on the user being tricked into clicking the link.
Affected Products
- Cisco Integrated Management Controller (IMC) – The vKVM feature is affected, allowing potential redirection to malicious sites.
- Cisco UCS Manager – The affected vKVM client is also included in this product.
Mitigation
To mitigate this vulnerability, users should be cautious about clicking on links from untrusted sources. Cisco may also provide patches or updates to address this issue, so keeping software up to date is recommended.