This message was deleted.

I'm confused...based on the CTX article it looked like access to the NSIP was required and the vulnerability against the gateway was vpn specific.

Just sharing the article. Not able to confirm validity.

Understand, that wasn't what I was implying 👍