The vulnerability, disclosed 12 months ago, affects multiple manufacturers.