A decade-old security flaw is being actively exploited, according to a warning issued by Cisco.