An auth bypass in the web UI of Cisco Secure Firewall Management Center (FMC) lets an unauthenticated remote attacker send crafted HTTP requests to execute script files/commands and gain root OS access. Affects Cisco Secure FMC and SCC Firewall Management (SaaS already patched). Apply Cisco FMC hotfixes for 7.0/7.2/7.4/7.6/7.7/10.0.