Vulnerability in Virtual Keyboard Video Monitor Connection Handling of Cisco Products
CVE-2025-20317
7.1HIGH
What is CVE-2025-20317?
A security flaw in the handling of Virtual Keyboard Video Monitor (vKVM) connections within Cisco's Integrated Management Controller allows attackers to redirect unsuspecting users to malicious web pages. This issue arises from inadequate endpoint validation for vKVM, enabling unauthenticated remote attackers to exploit the vulnerability by crafting deceptive links. When clicked, these links can lead users to sites designed for credential capture, posing significant risks to user security and data integrity.
Affected Version(s)
Cisco Unified Computing System (Managed) 4.0(1a)
Cisco Unified Computing System (Managed) 3.2(3n)
Cisco Unified Computing System (Managed) 4.1(1a)