CVE-2019-12648

CVE-2019-12648 describes a critical vulnerability in the IOx application environment within Cisco IOS Software, affecting various Cisco Industrial Integrated Services Routers and CGR devices. This flaw allows an authenticated, low-privileged remote attacker to bypass role-based access controls and gain root access to the Guest Operating System. With a CVSS score of 8.8 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness.