CVE-2019-12665

CVE-2019-12665 is a high-severity vulnerability affecting the HTTP client feature in Cisco IOS and IOS XE Software. It allows an unauthenticated, remote attacker to intercept and modify data intended for encrypted channels due to improper handling of TCP port information in persistent HTTP connections. Exploitation requires a man-in-the-middle attack, but if successful, it could lead to significant confidentiality and integrity compromise. While the CVSS score is 7.4 (High), there is currently no evidence of active exploitation, public exploit code, or significant community discussion.