Cisco fixes high-severity vulnerabilities in its VPN product