7.1
Élevée
CVE-2025-20317 A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management…
Description
A vulnerability in the Virtual Keyboard Video Monitor (vKVM) connection handling of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to redirect a user to a malicious website. This vulnerability is due to insufficient verification of vKVM endpoints. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious webpage and potentially capture user credentials. Note: The affected vKVM client is also included in Cisco UCS Manager.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Computing System (Managed) | Versions non publiées | |
| Cisco Unified Computing System (Standalone) | Versions non publiées | |
| Cisco Unified Computing System E-Series Software (UCSE) 4.12 | 4.12.1 → 4.12.2 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 4.11.1 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 4.00 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.2 | 3.2.1 → 3.2.16.1 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.1 | 3.1.0 → 3.1.5 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 3.0 | 3.0.1 → 3.0.2 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 2.4 | 2.4.0 → 2.4.2 | Pas de correctif indiqué |
Afficher les 5 autres branches Masquer les 5 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Unified Computing System E-Series Software (UCSE) 2.3 | 2.3.1 → 2.3.5 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) 2.2 | 2.2.1 → 2.2.2 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 2.02 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 2.1.0 | Pas de correctif indiqué |
| Cisco Unified Computing System E-Series Software (UCSE) | 2.0.0 | Pas de correctif indiqué |
Références
- cisco-sa-ucs-vkvmorv-CnKrV7HK sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Unified Computing System (Managed)
Les 41 CVE de Cisco Unified Computing System (Managed) →
CVE-2026-76458
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…
8.6
Élevée
CVE-2026-76459
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…
9.8
Critique
CVE-2026-76471
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to execute…
9.8
Critique
CVE-2026-76455
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has…
9.8
Critique