Network device software lags releases by months because upgrades are manual, risky and scheduled around scarce engineers. Known vulnerabilities stay in production far longer than anyone admits.
"We know the CVE, we have the patch, and it will still take four months to reach every device — how is that acceptable?"
Time to patch the estate
Devices on vulnerable versions
To first automated wave