Running NCM 2020.2.5. Weekly report that we run is not updating CVE alerts and the settings are correct. The majority of switches in our network on same code version although only a few are showing NIST/CVE alerts for over 2 years ago. Existing vulnerability settings is pointing to correct feeds from NIST (2020, 2021, modified and recent JSON files). Ive ran the repair, repopulated the inventory, same results. Solarwinds support has been on this for almost 2 months. This is what they are seeing:
I checked the VulnLib log file and I found multiple error.
2021-07-15 00:35:13,298 [94] ERROR SolarWinds.NCM.VulnLib.VulnDownloader - Unable download "">nvd.nist.gov/.../nvdcpematch-1.0.json.zip".System.IO.IOException: Received an unexpected EOF or 0 bytes from the transport stream.
at System.Net.ConnectStream.Read(Byte[] buffer, Int32 offset, Int32 size)
at System.IO.Stream.InternalCopyTo(Stream destination, Int32 bufferSize)
at SolarWinds.NCM.VulnLib.Help.FileSystemHelper.WriteStreamToFile(Stream stream, String filePath)
at SolarWinds.NCM.VulnLib.Help.WebDownloader.<>c__DisplayClass3_0.b__0()
at SolarWinds.NCM.Common.Help.TlsScope.Execute(Action handler, Type[] additionalExceptionTypesToHandle)
at SolarWinds.NCM.VulnLib.Help.WebDownloader.DownloadFile(String url, String fileName)
at SolarWinds.NCM.VulnLib.VulnDownloader.Download(String url, String path)
This tells us that it is having a problem with the download. Can you please log in to the Main Polling Engine and try to access the link "">nvd.nist.gov/.../nvdcpematch-1.0.json.zip".
Ive had no problems accessing this link from the main poller and pull down the correct files. Any ideas or thoughts would be helpful. Thanks.
