CVE Tracking per Asset
Know exactly which devices in your network are exposed to which CVEs, before your vendor tells you. Matched against real device firmware versions from your CMDB.
- ✓Matched against real firmware versions
- ✓CVSS scoring per CVE per device
- ✓Covers switches, routers, firewalls, APs
- ✓Prioritized by exploitability and exposure
- ✓Updated from NVD/CISA feeds
- ✓Export affected device list
981 total CVEs tracked across 312 devices
Vulnerability Tracking That Actually Tells You Something
Most tools tell you a CVE exists. ConnectMyAssets tells you exactly which devices in your network are running the vulnerable firmware right now.
Firmware-Matched
CVEs are matched against the exact firmware version running on each device. Not generic vendor alerts.
CVSS Scoring
Every CVE shows CVSS base score, exploitability vector, and impact assessment.
All Device Types
Switches, routers, firewalls, and access points. Not limited to one vendor or device class.
Prioritization
Sort by CVSS score, number of affected devices, or exploitability. Focus on what matters most.
Feed Updates
Connected to NVD and CISA Known Exploited Vulnerabilities catalog. Always current.
Export
Export affected device list with CVE details for vulnerability management workflows.
How It Works
From device discovery to prioritized remediation, automatically, continuously.
Inventory First
ConnectMyAssets knows the exact firmware version of every device from your CMDB.
Match CVEs
CVE feeds are matched against each device's firmware. New CVEs are evaluated automatically.
Prioritize & Act
See which devices need patching most urgently. Export to your patching workflow.
Why firmware-matched matters
Generic vendor alerts say "all FortiOS versions below 7.4.3". ConnectMyAssets tells you: "these 3 specific devices in your network are running 7.2.1 and are affected." Different level of precision.
That precision is what turns a vendor bulletin into an actionable remediation task, scoped, exported, and ready for your patching workflow.
Generic Vendor Alert
"Customers running FortiOS versions below 7.4.3 are advised to upgrade immediately."
: Leaves you guessing which of your 400 firewalls are affected.
ConnectMyAssets
"3 devices (fw-paris-01, fw-lyon-03, fw-bx-02) are running FortiOS 7.2.1 and are affected by CVE-2023-27997 (CVSS 9.8)."
: Exactly what you need to act immediately.
Frequently Asked Questions
Common questions about CVE tracking and vulnerability management
Where does ConnectMyAssets get its CVE data from?
CVE data is sourced from the NIST National Vulnerability Database (NVD) and the CISA Known Exploited Vulnerabilities catalog. Both feeds are updated continuously so newly published CVEs are evaluated against your inventory without any manual action required.
How are CVEs matched to specific devices?
ConnectMyAssets matches CVEs against the exact firmware version and model collected from each device in your CMDB. If a CVE affects FortiOS 7.2.1 specifically, only devices running that exact version are flagged, not all Fortinet devices. This eliminates false positives from generic vendor advisories.
Can I set alert thresholds based on CVSS score?
Yes. You can configure alerts to trigger when a new CVE above a specified CVSS threshold is matched to one or more of your devices. Typical configurations alert on CVSS 7.0 or above, with separate escalation for critical scores of 9.0 or above. Alerts can be sent by email or forwarded to your existing ticketing or SIEM system.
How many devices and CVEs can ConnectMyAssets track simultaneously?
There is no fixed upper limit per appliance. The platform is sized during deployment based on your inventory. Customers routinely track several hundred to several thousand devices and thousands of CVEs concurrently. Appliance sizing recommendations are provided based on your device count and polling frequency.
Can I export the list of affected devices for a specific CVE?
Yes. For any CVE in the dashboard, you can export a list of all affected devices including their names, IP addresses, firmware versions, locations, and CVSS scores. The export is available in CSV format and is ready to feed directly into your vulnerability management or patching workflow.
Does CVE tracking work without internet access on the appliance?
The appliance itself runs fully on-premises and never sends your network data to the internet. For CVE feed updates, the appliance needs outbound access to NVD and CISA endpoints. If your security policy prohibits direct internet access, feed updates can be proxied through your existing outbound proxy. Air-gapped deployment options with manual feed import are also available.
Know Your Exposure Before Your Vendor Does
Matched to your real infrastructure, not generic bulletins.