Older Cisco devices unpatched against a recent zero-day vulnerability have been infected with a rootkit in a new campaign.