A vulnerability patched earlier this month by Cisco in its firewalls has been exploited as a zero-day since at least late January.