Vulnerability oriented configuration management

A non-transitory machine-readable medium, comprising executable instructions that, when executed by at least one processor, facilitate performance of operations, comprising:

• determining configuration data representative of configurations of remote target devices;
• retrieving, from a common vulnerability and exposure (CVE) entity, a CVE publication comprising a CVE determined, using the configuration data, to be applicable to a remote target device of the remote target devices;
• using machine learning comprising reinforcement learning based on previous remediations of previous CVE publications applicable to other remote target devices other than the remote target device, generating, a remote target device update determined to mitigate exposure of the remote target device to the CVE, wherein the reinforcement learning iteratively improves the remote target device update to mitigate or eliminate the exposure of the remote target device to the CVE;
• validating the remote target device update by applying a unit test suite to the remote target device update, resulting in a validated remote target device update, wherein the remote target device update is determined to be a valid remediation in response to the remote target device update passing the unit test suite without introducing an error;
• and
• in response to validating the remote target device update, applying the validated remote target device update to the remote target device.

A method, comprising:

• determining, by a system comprising at least one processor, remote device data representative of configurations of remote devices communicatively coupled to the system;
• retrieving, by the system from a common vulnerability and exposure (CVE) entity, a CVE publication comprising a CVE determined, using the remote device data, to be applicable to a remote device of the remote devices;
• generating, by the system using machine learning comprising reinforcement learning based on previous remediations of previous CVE publications applicable to other remote devices other than the remote device, a remote device update determined to mitigate or eliminate exposure of the remote device to the CVE, wherein the reinforcement learning iteratively improves the remote device update to mitigate or eliminate the exposure of the remote device to the CVE;
• validating, by the system, the remote device update by applying a unit test suite to the remote device update, resulting in a validated remote device update, wherein the remote device update is determined to be a valid remediation in response to the remote device update passing the unit test suite without introducing an error;
• and
• in response to validating the remote device update, facilitating, by the system, application of the validated remote device update to the remote device.