CVE-2019-12708

CVE-2019-12708 is a sensitive information disclosure vulnerability affecting Cisco SPA100 Series Analog Telephone Adapters (SPA112 and SPA122). An authenticated, remote attacker can exploit unsafe handling of user credentials within the web-based management interface to access administrative credentials, potentially leading to elevated privileges. With a CVSS score of 6.5 (Medium), this vulnerability has a low attack complexity and no user interaction required, but it does require prior authentication. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.