CyberRota Analysis
AI-GeneratedCisco Secure FMC and FTD Software are vulnerable due to improper memory management in the sftunnel inter-device communication protocol, allowing unauthenticated remote attackers to send specially crafted TLS frames. Exploiting this vulnerability can lead to memory exhaustion, causing a denial-of-service (DoS) condition on the affected devices. Organizations using these Cisco products should prioritize patching to mitigate potential disruptions to their network services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure FMC Software and Cisco Secure FTD Software could allow an unauthenticated, remote attacker to exhaust the available memory of an affected device. This vulnerability is due to improper management of memory resources during sftunnel TLS connection setup. An attacker could exploit this vulnerability by sending crafted sftunnel TLS frames to an affected device during the connection setup. A successful exploit could allow the attacker to exhaust the available memory on the affected device, which could result in a DoS condition.