Exploiting Cisco IMC Virtual Keyboard – Redirecting Users to Malicious Websites

Cisco issued a critical advisory for an IMC vKVM vulnerability that can allow unauthenticated attackers to redirect users to attacker-controlled web pages, risking credential theft and lateral compromise. The flaw affects a wide range of Cisco products (UCS B/C/X-Series, Catalyst 8300, APIC, HyperFlex, Secure Firewall Management Center, etc.), has no workaround, and Cisco has released patched versions — customers are urged to upgrade immediately despite no reported active exploitation.