EoL GMS Left Unpatched as Cisco and WatchGuard Push Critical Fixes
Written by AI from the linked story. Not reviewed by an editor. How this works
This incident highlights the compounding risk of running End-of-Life (EoL) software in production environments: when vendors cease support, critical vulnerabilities go unaddressed, leaving organizations permanently exposed. SonicWall's decision not to patch two critical flaws in GMS underscores that EoL systems are not just outdated — they are active liabilities. Meanwhile, the Cisco and WatchGuard patches serve as a reminder that timely remediation of critical RCE and authentication vulnerabilities is essential to prevent system compromise. Organizations that delay patching or fail to plan for EoL transitions hand attackers a reliable, indefinite foothold.
Tactical Insight
Immediate actions
- Apply Cisco and WatchGuard patches immediately, prioritizing internet-facing and management-plane systems.
- Identify all instances of SonicWall GMS in your environment and isolate or decommission them until a supported replacement is in place.
- Restrict network access to unpatched EoL management systems using firewall rules or access control lists.
Long-term improvements
- Maintain a continuously updated asset inventory that tracks software version, vendor support status, and EoL dates for all network appliances.
- Establish a formal EoL management policy that triggers migration planning at least 12 months before vendor support ends.
- Implement a risk-based patch management programme with defined SLAs for critical vulnerabilities (e.g., patch within 24–72 hours for CVSS ≥9.0).
Detection measures
- Deploy vulnerability scanning tools configured to flag EoL and unpatched components across all network segments on at least a weekly cadence.
- Monitor management interfaces and authentication logs for anomalous access patterns that may indicate exploitation of unpatched flaws.