Abstract: A service analyzes impact of new software updates for various network elements and performs tailored recommendation of software updates to a customer having a network element(s) deployed. The service analyzes impact of a software update based on evaluation of documentation published for the update and data of issues that are at least potentially associated with the software update (e.g., software bugs, vulnerabilities, etc.) to obtain software update metadata and data indicating changes in functionality and/or potential issues affecting the software. The service parses configuration data for the network element(s) based on the update impact data/metadata to extract a subset that is relevant to available software updates.

Abstract: A system as disclosed herein analyzes unresolved vulnerabilities against current configurations of devices of a network to generate an impact analysis report which provides a comprehensive view of the impact of the vulnerabilities on the network. This provides a manageable perspective of risk assessment and remediation for the network. To maintain a current view of device configurations, telemetry data streams are collected from the devices. A listing of outstanding or unresolved cybersecurity vulnerabilities is also maintained. When an analysis trigger is detected, the system extracts values of configuration properties for devices from the telemetry data streams and analyses them against the list of vulnerabilities to determine devices affected by the vulnerabilities. Tracking data are maintained according to the determinations of affected devices across vulnerabilities. This data is aggregated into an impact report that indicates impact of vulnerabilities to the network.