eol.network
Account
Home/Resources/Security Exposure

Post-EoL Security Exposure

Devices past their security-support date that are named in CISA's Known Exploited Vulnerabilities catalog.

This is not a CVE search tool. Every entry below is a specific device in our catalog that (1) is past the vendor's end-of-vulnerability-security-support or last-date-of-support date and (2) runs a platform listed in CISA's Known Exploited Vulnerabilities (KEV) catalog. The vendor is not patching these devices. The vulnerabilities are being exploited in the wild.

Correlation is at the platform level (Junos OS, PAN-OS, BIG-IP, SonicOS, Firebox, etc.). A specific CVE may affect only certain OS versions; the device may or may not have received the patch before the vendor cut off support. Assume exposure unless you've confirmed otherwise.

72
models on affected platforms
179
distinct CVEs
1647
KEV entries tracked

By vendor

Counts reflect post-EoL models running on an affected platform. A specific firmware version may not be vulnerable — verify with the vendor's PSIRT advisory.

Vendor Models on platform Distinct CVEs Ransomware-linked
Juniper 965 7 0
Cisco 815 60 3
Fortinet 514 24 12
Arista 201 1 0
QNAP 124 10 9
WatchGuard 92 4 0
SonicWall 84 16 9
Check Point 72 2 2
Sophos 39 3 0
NETGEAR 36 2 0
F5 Networks 33 7 4
Palo Alto 16 12 5
D-Link 13 14 1
Zyxel 12 1 0
Citrix 4 16 4

Flagged models

Clear filters

72 flagged devices (checkpoint).

Newest CVE added Device Vendor CVEs Ransom
12200 Appliance Check Point 2 Yes
12400 Appliance Check Point 2 Yes
12600 Appliance Check Point 2 Yes
13500 Appliance Check Point 2 Yes
13800 Appliance Check Point 2 Yes
15400 Appliance Check Point 2 Yes
15600 Appliance Check Point 2 Yes
2200 Appliance Check Point 2 Yes
21400 Appliance Check Point 2 Yes
21600 Appliance Check Point 2 Yes
21700 Appliance Check Point 2 Yes
21800 Appliance Check Point 2 Yes
23500 Appliance Check Point 2 Yes
23800 Appliance Check Point 2 Yes
23900 Appliance Check Point 2 Yes
3100 Appliance Check Point 2 Yes
3200 Appliance Check Point 2 Yes
4200 Appliance Check Point 2 Yes
4400 Appliance Check Point 2 Yes
4600 Appliance Check Point 2 Yes
4800 Appliance Check Point 2 Yes
5100 Appliance Check Point 2 Yes
5200 Appliance Check Point 2 Yes
5400 Appliance Check Point 2 Yes
5600 Appliance Check Point 2 Yes
5900 Appliance Check Point 2 Yes
6500 Appliance Check Point 2 Yes
6800 Appliance Check Point 2 Yes
SGM220 Check Point 2 Yes
SGM260 Check Point 2 Yes
SSM160 Check Point 2 Yes
SSM60 Check Point 2 Yes
Power-1 11060 Check Point 2 Yes
Power-1 11070 Check Point 2 Yes
Power-1 11080 Check Point 2 Yes
Power-1 5070 Check Point 2 Yes
Power-1 9070 Check Point 2 Yes
1120 Appliance Check Point 2 Yes
1140 Appliance Check Point 2 Yes
1180 Appliance Check Point 2 Yes
1430 Appliance Check Point 2 Yes
1450 Appliance Check Point 2 Yes
1470 Appliance Check Point 2 Yes
1490 Appliance Check Point 2 Yes
620 Appliance Check Point 2 Yes
640 Appliance Check Point 2 Yes
680 Appliance Check Point 2 Yes
730 Appliance Check Point 2 Yes
750 Appliance Check Point 2 Yes
770 Appliance Check Point 2 Yes
790 Appliance Check Point 2 Yes
UTM-1 1050 Check Point 2 Yes
UTM-1 1070 Check Point 2 Yes
UTM-1 130 Check Point 2 Yes
UTM-1 2050 Check Point 2 Yes
UTM-1 2070 Check Point 2 Yes
UTM-1 270 Check Point 2 Yes
UTM-1 3070 Check Point 2 Yes
UTM-1 450 Check Point 2 Yes
UTM-1 570 Check Point 2 Yes
UTM-1 Edge Industrial Check Point 2 Yes
UTM-1 Edge N Check Point 2 Yes
UTM-1 Edge N Industrial Check Point 2 Yes
VSX-1 11065 Check Point 2 Yes
VSX-1 11075 Check Point 2 Yes
VSX-1 11085 Check Point 2 Yes
VSX-1 11265 Check Point 2 Yes
VSX-1 11275 Check Point 2 Yes
VSX-1 11285 Check Point 2 Yes
VSX-1 3070 Check Point 2 Yes
VSX-1 9070 Check Point 2 Yes
VSX-1 9090 Check Point 2 Yes

Operators running any device in this list should treat it as a compensating-control scenario under NIST SA-22 and the equivalent PCI-DSS, HIPAA, and cyber-insurance guidance. See the Compliance and Insurance page for clause-level context and control options.

Source: CISA Known Exploited Vulnerabilities catalog. Snapshot refreshed weekly.

↑ Top