CVE-2019-12672

CVE-2019-12672 is a local privilege escalation vulnerability affecting Cisco IOS XE Software, stemming from insufficient file location validation. An attacker with physical access can insert a specially crafted USB device to execute arbitrary code with root privileges on the underlying operating system. While rated Medium severity (CVSS 6.8) due to requiring physical access, a successful exploit grants full control over the device. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.