The CIA has a tendency to do its own thing, and the NSA found the vulnerabilities. To my mind, this suggests that the NSA is competent at their job when allowed to do it. Further, the CIA could stand to benefit by allowing the specialists at the NSA to perform their function rather than trying to replicate it in-house.
This is naught but my opinion, and I understand where others might differ in their reading of the situation presented to us.