CVE-2017-12350

CVE-2017-12350 describes a critical vulnerability in Cisco Umbrella Insights Virtual Appliances versions 2.1.0 and earlier, stemming from hardcoded, static root credentials. An authenticated, local attacker could exploit this by connecting via the hypervisor console and using these default credentials to gain root access. With a CVSS score of 8.2 (HIGH), the vulnerability allows for complete compromise of confidentiality, integrity, and availability with low attack complexity. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.