This vulnerability in Cisco Secure FMC Software is caused by unsecured deserialization of web-management user-controlled data. An attacker with valid credentials and at least Security Analyst role can send a crafted HTTP payload to the device, which can then be saved and executed on the underlying OS as root, leading to arbitrary command execution at the highest privilege level. The CVSS 3.1 base score is 8.8, reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows an authenticated attacker with Security Analyst or higher privileges to execute arbitrary commands on the device as root, potentially leading to full system compromise. This can result in complete control over the firewall management center, affecting confidentiality, integrity, and availability of the system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the management interface to trusted users only, enforce strong credential policies, and monitor for suspicious activity from authenticated users. Do not grant unnecessary Security Analyst or higher roles to untrusted users.