Post-EoL Security Exposure
Post-security-support SKUs matched to affected platforms in CISA's Known Exploited Vulnerabilities catalog.
Networking coverage audit
Platform mapping and support-date coverage are separate. These counts describe the current KEV snapshot, not installed-device exposure. Reviewed out-of-catalog entries concern other product lines; unmapped entries remain unresolved.
| Vendor | Vendor KEVs | Mapped | Unmapped | Reviewed outside catalog | Products with unknown support end |
|---|
KEV mapping coverage gaps
These KEV product groups have no correlation rule. They are not included in the matched-SKU counter; this is unknown coverage, not a finding of no exposure.
| Vendor | KEV product group | KEV entries |
|---|
This is not a CVE search tool. Every entry below is a specific device in our catalog that (1) is past the vendor's end-of-vulnerability-security-support or last-date-of-support date and (2) runs a platform listed in CISA's Known Exploited Vulnerabilities (KEV) catalog. The vendor is not patching these devices. The vulnerabilities are being exploited in the wild.
Correlation is at the platform level (Junos OS, PAN-OS, BIG-IP, SonicOS, Firebox, etc.). A specific CVE may affect only certain OS versions; the device may have received the patch before the vendor cut off support. Counts represent SKUs, including variants, rather than deployed devices or unique hardware models.
By vendor
Counts reflect post-EoL models running on an affected platform. A specific firmware version may not be vulnerable — verify with the vendor's PSIRT advisory.
| Vendor | Models on platform | Distinct CVEs | Ransomware-linked |
|---|---|---|---|
| Cisco | 2217 | 71 | 3 |
| Juniper | 1142 | 7 | 0 |
| Fortinet | 527 | 25 | 13 |
| QNAP | 217 | 10 | 9 |
| Arista | 204 | 1 | 0 |
| SonicWall | 102 | 18 | 12 |
| WatchGuard | 92 | 4 | 1 |
| Check Point | 73 | 2 | 2 |
| F5 Networks | 52 | 8 | 4 |
| Sophos | 39 | 3 | 0 |
| NETGEAR | 36 | 2 | 0 |
| Palo Alto | 19 | 13 | 6 |
| D-Link | 13 | 14 | 1 |
| Zyxel | 12 | 1 | 0 |
| VMware (Broadcom) | 8 | 16 | 7 |
| Citrix | 4 | 21 | 4 |
Flagged models
92 flagged devices (watchguard).
| Newest CVE added | Device | Vendor | CVEs | Ransom |
|---|---|---|---|---|
| Firebox II | WatchGuard | 4 | Yes | |
| Firebox II+ | WatchGuard | 4 | Yes | |
| Firebox II+ Fast VPN | WatchGuard | 4 | Yes | |
| Firebox M200 | WatchGuard | 4 | Yes | |
| Firebox M300 | WatchGuard | 4 | Yes | |
| Firebox M400 | WatchGuard | 4 | Yes | |
| Firebox M440 | WatchGuard | 4 | Yes | |
| Firebox M500 | WatchGuard | 4 | Yes | |
| Firebox S6 | WatchGuard | 4 | Yes | |
| Firebox SOHO 6 This end-of-life schedule also applies to legacy SOHO models. | WatchGuard | 4 | Yes | |
| Firebox SOHO 6 Wireless | WatchGuard | 4 | Yes | |
| Firebox SSL Core VPN Gateway | WatchGuard | 4 | Yes | |
| Firebox T10 | WatchGuard | 4 | Yes | |
| Firebox T10-D | WatchGuard | 4 | Yes | |
| Firebox T10-W | WatchGuard | 4 | Yes | |
| Firebox T30 | WatchGuard | 4 | Yes | |
| Firebox T30-W | WatchGuard | 4 | Yes | |
| Firebox T35 | WatchGuard | 4 | Yes | |
| Firebox T35-W | WatchGuard | 4 | Yes | |
| Firebox T50 | WatchGuard | 4 | Yes | |
| Firebox T50-W | WatchGuard | 4 | Yes | |
| Firebox T55 | WatchGuard | 4 | Yes | |
| Firebox T55-W | WatchGuard | 4 | Yes | |
| Firebox T70 | WatchGuard | 4 | Yes | |
| Firebox Vclass Non-V200 models Japan Only | WatchGuard | 4 | Yes | |
| Firebox Vclass Non-V200 models Outside Japan | WatchGuard | 4 | Yes | |
| Firebox Vclass V200 | WatchGuard | 4 | Yes | |
| Firebox X Core X1000 | WatchGuard | 4 | Yes | |
| Firebox X Core X1250e | WatchGuard | 4 | Yes | |
| Firebox X Core X2500 | WatchGuard | 4 | Yes | |
| Firebox X Core X500 | WatchGuard | 4 | Yes | |
| Firebox X Core X550e | WatchGuard | 4 | Yes | |
| Firebox X Core X700 | WatchGuard | 4 | Yes | |
| Firebox X Core X750e | WatchGuard | 4 | Yes | |
| Firebox X Edge X10e | WatchGuard | 4 | Yes | |
| Firebox X Edge X10e-W | WatchGuard | 4 | Yes | |
| Firebox X Edge X15 | WatchGuard | 4 | Yes | |
| Firebox X Edge X15W | WatchGuard | 4 | Yes | |
| Firebox X Edge X20e | WatchGuard | 4 | Yes | |
| Firebox X Edge X20e-W | WatchGuard | 4 | Yes | |
| Firebox X Edge X5 | WatchGuard | 4 | Yes | |
| Firebox X Edge X50 | WatchGuard | 4 | Yes | |
| Firebox X Edge X50W | WatchGuard | 4 | Yes | |
| Firebox X Edge X55e | WatchGuard | 4 | Yes | |
| Firebox X Edge X55e-W | WatchGuard | 4 | Yes | |
| Firebox X Edge X5W | WatchGuard | 4 | Yes | |
| Firebox X Peak X5000 | WatchGuard | 4 | Yes | |
| Firebox X Peak X5500e | WatchGuard | 4 | Yes | |
| Firebox X Peak X6000 | WatchGuard | 4 | Yes | |
| Firebox X Peak X6500e | WatchGuard | 4 | Yes | |
| Firebox X Peak X8000 | WatchGuard | 4 | Yes | |
| Firebox X Peak X8500e | WatchGuard | 4 | Yes | |
| Firebox X Peak X8500e-F | WatchGuard | 4 | Yes | |
| XTM 1050 | WatchGuard | 4 | Yes | |
| XTM 1520 | WatchGuard | 4 | Yes | |
| XTM 1520-RP | WatchGuard | 4 | Yes | |
| XTM 1525-RP | WatchGuard | 4 | Yes | |
| XTM 2050 | WatchGuard | 4 | Yes | |
| XTM 21 | WatchGuard | 4 | Yes | |
| XTM 21-W | WatchGuard | 4 | Yes | |
| XTM 22 | WatchGuard | 4 | Yes | |
| XTM 22-W | WatchGuard | 4 | Yes | |
| XTM 23 | WatchGuard | 4 | Yes | |
| XTM 23-W | WatchGuard | 4 | Yes | |
| XTM 25 | WatchGuard | 4 | Yes | |
| XTM 25-W | WatchGuard | 4 | Yes | |
| XTM 2520 | WatchGuard | 4 | Yes | |
| XTM 26 | WatchGuard | 4 | Yes | |
| XTM 26-W | WatchGuard | 4 | Yes | |
| XTM 33 | WatchGuard | 4 | Yes | |
| XTM 33-W | WatchGuard | 4 | Yes | |
| XTM 330 | WatchGuard | 4 | Yes | |
| XTM 505 | WatchGuard | 4 | Yes | |
| XTM 510 | WatchGuard | 4 | Yes | |
| XTM 515 | WatchGuard | 4 | Yes | |
| XTM 520 | WatchGuard | 4 | Yes | |
| XTM 525 | WatchGuard | 4 | Yes | |
| XTM 530 | WatchGuard | 4 | Yes | |
| XTM 535 | WatchGuard | 4 | Yes | |
| XTM 545 | WatchGuard | 4 | Yes | |
| XTM 810 | WatchGuard | 4 | Yes | |
| XTM 820 | WatchGuard | 4 | Yes | |
| XTM 830 | WatchGuard | 4 | Yes | |
| XTM 830-F | WatchGuard | 4 | Yes | |
| XTM 850 | WatchGuard | 4 | Yes | |
| XTM 860 | WatchGuard | 4 | Yes | |
| XTM 870 | WatchGuard | 4 | Yes | |
| XTM 870-F | WatchGuard | 4 | Yes | |
XTMv-Datacenter |
WatchGuard | 4 | Yes | |
XTMv-Large |
WatchGuard | 4 | Yes | |
XTMv-Medium |
WatchGuard | 4 | Yes | |
XTMv-Small |
WatchGuard | 4 | Yes |
Operators running any device in this list should treat it as a compensating-control scenario under NIST SA-22 and the equivalent PCI-DSS, HIPAA, and cyber-insurance guidance. See the Compliance and Insurance page for clause-level context and control options.
Source: CISA Known Exploited Vulnerabilities catalog. Snapshot refreshed weekly.