Cisco IOS XE Software Web UI Privilege Escalation Vulnerability

According to its self-reported version, the Cisco IOS XE Software is affected by one or more vulnerabilities. Please see the included Cisco BIDs and the Cisco Security Advisory for more information. TRUSTED...

CVE-2017-12230

Cisco IOS XE Software Web UI Privilege Escalation (CVE-2017-12230) affects Cisco IOS XE 16.2 web UI where incorrect default permissions for newly created users allow an authenticated attacker to elevate privileges by first creating a user via the web UI and then logging in as that user. The Denal...