vulnerability-assessment

Map network device software versions to CVEs with CVSS v3.1 scoring.

Updated Mar 15, 2026
One-click install
npx skills add https://github.com/vahagn-madatyan/netsec-skills-suite --skill vulnerability-assessment-vahagn-madatyan
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vulnerability-assessment
Source: https://github.com/vahagn-madatyan/netsec-skills-suite/tree/main/skills/vulnerability-assessment
Command: npx skills add https://github.com/vahagn-madatyan/netsec-skills-suite --skill vulnerability-assessment-vahagn-madatyan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

CVE assessment and CVSS v3.1 scoring for network infrastructure devices. Maps running software versions to known vulnerabilities via NVD and vendor advisories, classifies risk by severity, network exposure, and exploit availability, and generates prioritized remediation plans with SLA-driven timelines.

Core Features & Use Cases

  • CVE mapping: correlate running device software to known CVEs using NVD data and vendor advisories.
  • Risk scoring and prioritization: classify findings by CVSS v3.1 severity, KEV status, and network exposure, then produce remediation SLAs.
  • Coverage: supports Cisco, Juniper, Arista, Palo Alto, and Fortinet platforms with ready-to-use reference materials.

Quick Start

Launch a vulnerability posture assessment against the target fleet to generate a prioritized remediation plan.

Frequently Asked Questions about vulnerability-assessment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize CVEs for network infrastructure devices?

Prioritize CVEs by mapping running device software versions to known vulnerabilities via NVD and vendor advisories, then classify risk using CVSS v3.1 severity, KEV status, and network exposure to generate SLA-aligned remediation timelines.

What is CVSS v3.1 scoring and how does it apply to vulnerability assessment?

CVSS v3.1 scoring provides a standardized method for measuring vulnerability severity during vulnerability assessment. It combines with KEV cross-references and network exposure data to classify risk and drive prioritized remediation plans across vendor platforms.

Does this vulnerability assessment support Cisco, Juniper, and Palo Alto platforms?

Yes, vulnerability assessment supports Cisco, Juniper, Arista, Palo Alto, and Fortinet network platforms. It maps running software versions to known CVEs using NVD data and vendor advisories to produce ready-to-use reference materials for these environments.

How do I map running device versions to known CVEs using NVD data?

Map running device versions to CVEs by correlating your network device software posture against NVD data and vendor advisories. The process identifies matching vulnerabilities and applies CVSS v3.1 scoring with KEV cross-references for risk classification.

Can I generate SLA-driven remediation plans from CVE risk scores?

Yes, you can generate SLA-driven remediation plans from CVE risk scores. The assessment classifies findings by CVSS v3.1 severity, KEV status, and network exposure, then outputs a prioritized remediation plan with SLA-aligned timelines for actionable patching.

What's the best way to classify vulnerability risk using KEV and network exposure?

The best way to classify vulnerability risk is by cross-referencing CVE findings against the KEV catalog for known exploit availability and evaluating network exposure. This combined approach with CVSS v3.1 scoring produces accurate risk prioritization for remediation planning.