Attackers already exploiting the critical flaw, and Cisco warns they may be able to cover their tracks once they're in