CVE-2017-12230

CVE-2017-12230 describes a privilege escalation vulnerability in the web-based user interface (web UI) of Cisco IOS XE 16.2. Specifically, incorrect default permission settings for new users created via the web UI allow an authenticated, remote attacker to elevate their privileges on affected devices where the HTTP Server feature is enabled. This vulnerability carries a CVSS score of 8.8 (HIGH), indicating a high-impact threat. An attacker can exploit this with low complexity by simply creating a new user through the web UI and logging in, leading to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (not in KEV), no public exploit code (Metasploit, Nuclei, ExploitDB), and a low EPSS score, the vulnerability has received some community discussion and media coverage, suggesting awareness within the security community.