CVE-2017-12285

CVE-2017-12285 is a directory traversal vulnerability in the web interface of Cisco Network Analysis Module Software. An unauthenticated, remote attacker can exploit this flaw by sending crafted HTTP requests, bypassing improper input validation and lack of role-based access controls. This allows for the deletion of arbitrary files on the affected system. While rated Medium severity (CVSS 5.3), its FAUCET Risk Score is high at 98/100, and its EPSS score indicates a higher-than-average likelihood of exploitation. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.