Threats tagged 'ghsa-355g-mjpr-92rq'

A critical vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software allows an authenticated remote attacker with administrative credentials to gain root privileges. The flaw arises from unsecured deserialization of untrusted data over the sftunnel management connection. Exploitation requires sending crafted remote procedure calls (RPCs) via sftunnel. This vulnerability affects devices running Cisco Secure FMC Software and its high-availability peers.