One Cisco bug impacting its 800 and 1000 series routers had a CVSS severity score of 9.9.
Source: Threadpost