This vulnerability arises from insecure deserialization of user-supplied Java byte streams in the External Database Access feature of Cisco Secure Firewall Management Center (FMC). An attacker controlling a host listed in the external database access list can exploit this by sending a malicious serialized Java byte stream to a designated TCP port on the device. Successful exploitation results in arbitrary command execution with root privileges on the affected device. The vulnerability affects multiple specific versions of Cisco FMC as enumerated, and the attack surface is limited if the management interface is not publicly accessible.

An attacker who controls a host in the external database access list can remotely execute arbitrary commands with root privileges on the affected Cisco FMC device. This leads to full system compromise, including confidentiality, integrity, and availability impacts. The vulnerability does not allow exploitation from unauthenticated hosts outside the access list, and exposure is reduced if the management interface is not publicly accessible.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict the external database access list to trusted hosts only and ensure the FMC management interface is not accessible from the public internet to reduce the attack surface.