The vulnerability exists in the web interface of Cisco Secure Firewall Management Center (FMC). It allows an unauthenticated remote attacker to log in using static, low‑privileged account credentials, thereby gaining access to the system with the permissions of that user. This can enable viewing and potential exfiltration of sensitive data. The weakness is a hard‑coded or otherwise unchangeable password stored within the product and corresponds to CWE‑259.

The affected product is Cisco Secure Firewall Management Center (FMC). No specific version range is listed, so all deployed instances are potentially vulnerable until a patch removes the static credentials.

The CVSS score of 5.3 indicates moderate severity, yet the vulnerability is listed in the CISA KEV catalog, signaling real‑world exploitation. The EPSS score of <1% suggests few public exploitation opportunities, but the high Security Impact Rating reflects the flaw’s potential to combine with other FMC vulnerabilities for privilege escalation. Based on the description, it is inferred that the likely attack vector requires external exposure of the FMC web interface; attackers would need network access to the management console and then attempt the static credentials. Successful exploitation would permit a login as the low‑privileged user and could serve as a foothold for further compromise.