CVE-2019-12997

CVE-2019-12997 describes a critical privilege escalation vulnerability affecting Icon Loopchain through version 2.2.1.3, allowing an attacker with low-privilege shell access to gain higher privileges through environment variable injection. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. Despite its high severity and ease of exploitation, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.