This vulnerability in Cisco Secure Firewall Management Center (FMC) software enables an unauthenticated remote attacker to bypass authentication by exploiting an improper system process created at boot time. By sending specially crafted HTTP requests, the attacker can execute arbitrary scripts and commands on the device, resulting in root-level access to the underlying operating system. The vulnerability affects a wide range of FMC versions starting from 7.0.0 through 10.0.1 and beyond, as explicitly listed. The CVSS v3.1 base score is 10.0, reflecting its critical impact with network attack vector, no privileges required, no user interaction, and complete confidentiality, integrity, and availability compromise.

Successful exploitation allows an unauthenticated remote attacker to gain root access to the underlying operating system of the affected Cisco FMC device. This leads to full control over the device, enabling execution of arbitrary scripts and commands, which can compromise the confidentiality, integrity, and availability of the system and potentially the broader network environment it manages.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or workaround information is provided in the available data. Users should monitor Cisco's official security advisories for updates and apply any released patches promptly once available. Until then, restrict network access to the management interface to trusted sources only to reduce exposure.