And that decompiler operates as part of popular enterprise passive network monitoring hardware, so the attack vector is literally any JAR sent over the monitored switch, giving the attacker full read only access to the entire network (possibly even write access in some configurations).<p>That said, the manufacturer had configurations to mitigate the damage out within hours and a full patch 2 days after they were notified by Project Zero.