OTbase Asset Center automatically downloads vulnerability information and product metadata if configured to do so.
Security information downloads
For automatic CVE downloads from NIST (nvd.nist.gov) you have to activate the download function and also specify a time of day as well as the desired download interval (daily, every other day, every five days). When you have made your selection click on Save to save your settings. -- If you have checked this box, OTbase will also download KEV data from cisa.gov. KEV data inform you for which vulnerabilities there are known exploits.
If you also check "Security update information from microsoft.com" OTbase will also download security patch data from Microsoft. This enables OTbase to determine if a particular vulnerability is already fixed for a given device.
Product metadata downloads
Automatic product data updates include product catalog descriptions, product lifecycle information, information about current firmware version, and more. When activated, OTbase Asset Center will download curated product metadata from Langner once per week.
Product catalog upload
In order to assure that metadata for your installed products are provided, you must check the box labeled "Upload product catalog to Langner".
If you don't check the box, you may not get full coverage for your products.
The upload only contains product names and installation numbers. Installation numbers help Langner to identify vendors products that are installed in substantial numbers and therefore warrant more effort for metadata collection.
If you want to see which data is uploaded, just do an Excel export of your product catalog. The data you see there is what is uploaded.
Required web access
In order for OTbase Inventory to be able to pull metadata, you must make sure that the following URLs are accessible via HTTPS from the host where Inventory is running:
|Pulls CVE data from NIST
|Pulls KEV data from CISA
|Pulls patch data from Microsoft
|Pulls product metadata from Langner (US server)
|Pulls product metadata from Langner (European server)