DATE: January 4, 2021

SUBJECT: MS-ISAC End-of-Support Software Report List

It is critical to replace software before its End-of-Support (EOS). EOS occurs when the manufacturer discontinues software updates, patches, and other forms of support, resulting in software becoming prone to future vulnerabilities.

Using unsupported software and firmware/hardware puts organizations at risk in the following ways:

• Subsequent vulnerability disclosures place your organization at significant risk to cyber-attacks because manufacturers will not be providing remediation for the vulnerabilities.
• Subject your organization to regulatory compliance issues/violations.
• Extended support, if the option to extend is available, must be requested and paid for. This increases the support cost for the software.

Replacing software and firmware/hardware before it reaches EOS will significantly reduce any risks and costs associated with EOS. The process of finding EOS dates and locating all the instances of obsolete products can be a difficult and time-consuming task. The Multi-State Information Sharing and Analysis Center (MS-ISAC) compiles a quarterly report for EOS software with dates through the next 12 months. For monthly updates, please visit the End-of-Support Software Report List blog.