The maximum-severity vulnerability, which hasn’t been exploited in the wild yet, affects software customers use to manage networking devices.

The defendant posed as a whistleblower to leak misleading stories about the breach to the press.