A vulnerability bulletin lists a high-impact CVE in the city’s AP firmware train. What is the sound vulnerability-management response?
Select an answer to reveal the explanation.
Short Explanation
AP firmware CVEs are just like PC patches with antennas. Watch the advisories, score how bad it is for your estate, and schedule the upgrade like grown-up change control. Hoping the building walls stop remote bugs is wishful thinking.
Full Explanation
WLAN vulnerability management uses vendor/NVD CVE feeds, rates risk against exposure and exploitability, and prioritizes firmware remediation under change management. Ignoring advisories or waiting for public exploit write-ups extends window of compromise. Untracked random patching lacks auditability and may miss critical trains.