Threats tagged 'ghsa-f2cp-mvp8-7wp4'

A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC and FTD Software allows an unauthenticated adjacent attacker to impersonate a peer device and gain manager-level (root equivalent) access. This occurs due to improper TLS certificate management on the sftunnel management connection. Exploitation requires the sftunnel connection to be down or disrupted to allow the attacker to connect with a crafted TLS certificate and register as a peer with root access.