Headline is pretty click-baity. It looks like a better version might be "Some older Cisco switches are vulnerable to a simple telnet-based exploit." And then

Headline is pretty click-baity. It looks like a better version might be "Some older Cisco switches are vulnerable to a simple telnet-based exploit." And then buried deep in the body it could be noted that, while the CIA should probably be expected to be aware of any vulnerabilities, we actually know that they are aware of this one in particular due to some leaks. (Whereas the existing headline suggests that ONLY the CIA can use this vulnerability, which was false even before the leak.) But then, an article about how you shouldn't expose telnet to the public internet wouldn't be very newsworthy would it? :)