This has been known for a long, long time in the black hat hacking community as well as by Cisco admins.

On the older routers and switches, there used to be a way to turn it off. The newer ones, I don’t think so.