Cisco seems pretty good about patching. There have been some controversial cases, but typically when I see Cisco exploits at a conference, it will start with, "If you haven't patched your routers to xx.xx.xx, do it now."
Do you have specific examples of holes that have existed for a long time without official patches or mitigation?
Flip this around. If Chinese regulators sued Cisco, Juniper, etc. for known vulnerabilities while deliberately omitting local companies, everyone would scream protectionism.
Router companies need to be security conscious, but for the FTC to single out ONE foreign company doesn't smell right.
Do you have specific examples of holes that have existed for a long time without official patches or mitigation?