network device patching requirements/basics

When it comes to patching of network devices, namely cisco firewalls, which specific 'components' need considering from a security perspective. E.g. in comparison to windows based workstations, where a security bug could be specific to drivers, firmware, windows OS itself, apps installed etc, how do thing compare with network devices when it comes to patching, do Cisco issue separate updates for each area? I just want a simple list of components on cisco network devices and their corresponding management consoles/tools, that need 'patching' from a security perspective, to help assess how well our cyber security team are managing this issue.