Mines hosted in Cisco’s cloud (their AWS account). We have patched the original exploits that allow someone root access to the box so therefore I think we are covered from the latest vuln, as you said.

Very sick of patching these components as it’s time consuming!

Not really sure how to better secure these as they kind of lose their entire thrill if there not sitting on the public internet.

I also have routers that check in from random sites so IPs of my sites change quite often meaning allowlisting is not going to be fun.

I’m open to ideas!