Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Firmware Vulnerability List

Hi All,

I'm looking at our firmware vulnerability list and whilst the updates from NIST are being downloaded, we only ever see Juniper or Cisco firmware vulnerabilities.

We do not see vulnerbilities from Aruba, Huawei, Palo Alto or Fortigate. For some devices such as Aruba it will be because we are not pulling the configuration of the devices into NCM - which I am looking at to see if that is possible. For other devices, we have regular backups in place but we still do not see the CVEs concerning these devices appearing per node or in the master list.

Has anyone seen this before or know a reason why this is not happening?

Regards

Adrian

Find more posts tagged with

Accepted answers

All comments

stuartd

SolarWinds doesn't cover other manufacturers - depressingly.
https://documentation.solarwinds.com/en/success_center/ncm/content/ncm-working-with-firmware-vulnerability-data.htm

But you can vote on the request for HP/Aruba/HPE kit, created here:

https://thwack.solarwinds.com/product-forums/network-configuration-manager-ncm/i/feature-requests/feature-request---support-for-hp-switches-swi-filename-for-firmware-repository?CommentId=76077339-df19-49e2-9280-9b4486d99fcd

And you can also submit your own requests for other manufacturers if they don't already exist.

sja

No reason at all :-( those type of feature keep NCM relevant..

Please vote

https://thwack.solarwinds.com/product-forums/network-configuration-manager-ncm/i/feature-requests/firmware-vulnerability-for-all-vendors