CVEs aren’t a significant datapoint… In this case, a single-packet pre-auth root code exec is about as bad as it gets. I don’t recall the last time a major ven

CVEs aren’t a significant datapoint… In this case, a single-packet pre-auth root code exec is about as bad as it gets. I don’t recall the last time a major vendor had a doozie like that. Bugs happen, but having them wildly exploitable isn’t inevitable.