CVE-2020-3549

CVE-2020-3549 describes a high-severity vulnerability in Cisco Firepower Management Center (FMC) and Firepower Threat Defense (FTD) Software. An unauthenticated, remote attacker in a man-in-the-middle position could exploit insufficient sftunnel negotiation protection during initial device registration to obtain the device registration hash. This allows decryption and modification of sftunnel communication, potentially altering configuration data or alert data between FMC and FTD devices. While the CVSS score is 8.1 (High), there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.