An authentication bypass on the appliance that decides who is inside. The intruder inherits every assumption built on it.
Exploitation is arriving before organisations can deploy. Patching in twenty days is worth less than surviving a compromised appliance.
Four vendors, one campaign. Largest attack surface, least visibility, highest trust — and both states and criminals use the same door.
The vendor did not tell customers to update the appliance. It told them to throw it away.