CVE-2017-12305

CVE-2017-12305 is a debug shell command injection vulnerability affecting Cisco IP Phone 8800 series firmware, stemming from insufficient input validation. An authenticated, local attacker could exploit this to execute arbitrary commands. With a CVSS score of 6.7 (Medium), it requires high privileges and local access, but successful exploitation could lead to high confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.