This vulnerability arises from improper management of the Cisco ASDM SSO token in Cisco Secure FMC Software. An attacker can exploit session token forgery techniques to authenticate as the administrator user without credentials. Successful exploitation grants unauthorized administrative access and can deny legitimate administrators access indefinitely by repeated exploitation.

An unauthenticated remote attacker can gain administrative access to Cisco ASDM, compromising management of the firewall. This can lead to loss of control over firewall configurations and potential denial of service to legitimate administrators by locking them out of the management interface. The vulnerability does not directly impact confidentiality but affects integrity and availability.

Patch status is not yet confirmed — check the Cisco vendor advisory for current remediation guidance. Since no patch or official fix information is provided, administrators should monitor Cisco advisories closely and apply updates once available. Until patched, restrict network access to the ASDM interface to trusted hosts and consider additional access controls to mitigate risk.