Cisco Secure Firewall Management Center Software Vulnerabilities

An attacker with network access to your Firewall Management Center could gain full administrator control and forge user sessions, allowing them to reconfigure firewalls, modify security policies, or disable threat protections across your entire network infrastructure.

This vulnerability affects anyone operating Cisco Secure Firewall Management Center appliances in any size network. Municipal utilities, water authorities, and industrial facilities that rely on these firewalls for network segmentation and security policy enforcement are directly at risk, as compromise of the management center enables attackers to weaken or disable protections on all downstream firewalls.

An attacker sends a specially crafted network request to the Firewall Management Center without needing valid credentials. If successful, the attacker gains root-level code execution on the management console, which controls all deployed firewalls and security policies.