NCM already knows every device's firmware version. Check those versions against CVE and vendor end-of-support data and flag affected devices in the compliance dashboard, instead of cross-checking advisories by hand.