Is there anything in the CMMC/NIST requirements regarding network switches?

For instance, can't run out dated firmware, etc?

Someone from a different company is saying upgrading all network switches is a requirement for CMMC but can't think of a reason why, unless their switches can't do VLANs.