A vulnerability in a critical API of Cisco Secure FMC Software allows unauthenticated remote attackers to download sensitive files and consume unbounded disk space, potentially causing a denial-of-service (DoS) condition. The flaw exists because the API lacks authentication, enabling repeated exploitation. This vulnerability has a high severity rating with a CVSS score of 7.5.