Unpatched firmware on network equipment

Switches, routers, and firewalls run firmware that vendors patch for security flaws several times a year. An update needs a maintenance window and a rollback plan, so it is sometimes postponed.

Measures

The network team follows the advisories of the vendors and plans firmware updates every quarter, and critical flaws sooner. The Cisco and Fortinet devices are in the asset register with their firmware version.