Thousands of Cisco devices still at risk of unpatched NSA zero-day flaws