Edge Device Vulnerability Remediation Log

This dataset logs detailed vulnerability remediation actions for IoT and edge devices across distributed networks, including device context, vulnerability details, remediation timelines, and responsible teams. It enables cybersecurity teams to benchmark response times, track recurring issues, and optimize incident response processes for improved network security and operational resilience.

  • last updated 1 Dec 2025
  • by GoMask
The brief that made it

Benchmarking vulnerability remediation timelines across distributed networks

Sample rows

preview · 8 of 125 rows · all 20 columns
remediation_idstringdevice_typestringresponse_time_hoursfloatrecurring_issue_flagbooleanremediation_actionstringdevice_idstringdevice_locationstringnetwork_segmentstringvulnerability_idstringvulnerability_severitystringvulnerability_typestringdate_detecteddatedate_remediation_starteddatedate_remediation_completeddateremediation_statusstringincident_report_idstringassigned_teamstringresolution_time_hoursfloatvulnerability_descriptionstringremediation_notesstring
RM-202406A1sensor0falsepatch applieddev-001Data Center 3, New Yorkseg-DC03CVE-2023-4521Highfirmware2024-05-122024-05-122024-05-13CompletedINC-456789NY-EdgeOps24Buffer overflow in device firmware allows remote code execution.Firmware updated to latest secure version; no signs of exploitation.
RM-202406B2gateway24falseconfiguration changedgw-008Branch Office 2, Californiabranch-CA-2CVE-2024-1002Criticalauthentication2024-05-102024-05-112024-05-12CompletedINC-456790CA-SOC24Authentication bypass vulnerability in gateway management interface.Admin interface access restricted; strong password policy enforced.
RM-202406C3camera24falsepassword rotatedcam-004Factory 1, Illinoisseg-IL-01CVE-2023-3344Highconfiguration2024-04-292024-04-302024-05-01CompletedINC-456791IL-EdgeOps24Default admin credentials allow unauthorized access to video streams.Default passwords replaced; all users notified of change.
RM-202406D4smart lock24trueconfiguration changediot-XY99Retail Outlet 8, Dallasus-retail-8INT-2024-001Mediumconfiguration2024-04-212024-04-222024-04-22CompletedINC-456792US-FieldOps0Configuration error allows repeated lockout attempts, risking denial of access.Lockout parameters adjusted; monitoring enabled for repeated failures.
RM-202406E5edge node24falsenetwork isolationedge-RA12Cloud Zone Eastcloud-east-1CVE-2024-2234Highnetwork2024-05-032024-05-042024-05-06CompletedINC-456793CloudOps-East48Improper network isolation exposes internal services to public internet.Firewall rules updated to segment internal services; verified via penetration test.
RM-202406F6sensor24truefirmware updatedev-001Data Center 3, New Yorkseg-DC03CVE-2023-4521Highfirmware2024-05-202024-05-212024-05-21CompletedINC-456794NY-EdgeOps0Buffer overflow in device firmware allows remote code execution.Repeat occurrence; root cause analyzed and mitigated.
RM-202406G7controller24falseprotocol disabledctrl-011Factory 2, Michiganseg-MI-02CVE-2022-8812Criticallegacy2024-05-172024-05-182024-05-20CompletedINC-456795MI-EdgeOps48Legacy protocol support leaves controller vulnerable to replay attacks.Legacy protocol removed; all communications upgraded to secure standard.
RM-202406H8camera24truenetwork reconfigurationcam-004Factory 1, Illinoisseg-IL-01CVE-2024-9902Highnetwork2024-05-012024-05-022024-05-02CompletedINC-456796IL-EdgeOps0Unencrypted video stream exposes sensitive visual data.TLS encryption enabled on all streams; monitoring set for data leaks.

What the 125 rows show

from the 125-row sample

Environment sensor (device type) stands out: 12 of its 13 rows have recurring_issue_flag = true, against 43 of 112 for the rest.

  • 44%recurring_issue_flag = true
  • 24median response_time_hours
  • 4vulnerability severities
  • 4remediation statuses
  • 5vulnerability types
  • 24median resolution_time_hours
Recurring issue flag rate by device_typerecurring_issue_flag = true
0%50%100%44%sens…14 of…27%gate…6 of …28%came…5 of …83%smar…15 of…15%cont…2 of …92%envi…12 of…11%edge…1 of 9
response_time_hours100 rows, in bands of 20
040801179510020020100200response_time_hours →

Median 24, from 0 to 192.

remediation_action125 rows · top 10 of 12 values
  1. configuration changed37
  2. patch applied21
  3. patch attempted13
  4. network reconfiguration12
  5. network isolation11
  6. password rotated8
  7. firmware update8
  8. device replaced8
  9. patch scheduled3
  10. configuration scheduled2
20 columns by typefrom the column list below
  • string 14
  • float 2
  • date 3
  • boolean 1

Columns

20 columns in four groups
blueprint · 20 columns
columntypedescriptionexample
Text 14 columns
remediation_idstringUnique identifier for each remediation action loggeduniqueRM-202406A1
device_idstringUnique identifier for the edge or IoT devicedev-001
device_typestringType or model of the edge device (e.g., sensor, gateway, camera)7 typessensor
device_locationstringPhysical or logical location of the device (e.g., data center, branch office, GPS coordinates)optionalData Center 3, New York
network_segmentstringName or identifier for the network segment where the device residesoptionalseg-DC03
vulnerability_idstringIdentifier for the specific vulnerability (e.g., CVE number, internal code)CVE-2023-4521
vulnerability_descriptionstringDetailed description of the vulnerabilityBuffer overflow in device…
vulnerability_severitystringSeverity rating of the vulnerability (e.g., Low, Medium, High, Critical)Low · Medium · High · CriticalHigh
vulnerability_typestringType/category of vulnerability (e.g., firmware, network, authentication, configuration)5 typesfirmware
remediation_statusstringCurrent status of the remediation (e.g., Pending, In Progress, Completed, Failed)Pending · In Progress · Completed · FailedCompleted
remediation_actionstringType of action taken to remediate the vulnerability (e.g., patch applied, configuration changed, device replaced)12 actionspatch applied
remediation_notesstringAdditional notes or comments about the remediation processoptionalFirmware updated to lates…
incident_report_idstringReference to an incident report or ticket associated with this remediationoptionalINC-456789
assigned_teamstringName or identifier of the team responsible for remediationNY-EdgeOps
Numbers 2 columns
response_time_hoursfloatTime in hours between detection and remediation start0 or more · optional0
resolution_time_hoursfloatTime in hours between remediation start and completion0 or more · optional24
Dates and times 3 columns
date_detecteddateDate when the vulnerability was first detected2024-05-12
date_remediation_starteddateDate when remediation action was initiatedoptional2024-05-12
date_remediation_completeddateDate when remediation was completedoptional2024-05-13
True or false 1 column
recurring_issue_flagbooleanIndicates if this vulnerability or issue has occurred previously on this devicefalse

Use it for

  • recurring issu…44%55 of 125 rowsmean response time ho…19.7sens…20.8gate…25.4came…37.5smar…

    A technology dashboard

    The recurring_issue_flag rate, response_time_hours by device_type and a breakdown of remediation_action. Excel, Power BI or Tableau.

  • Why do 55 of 125 rows have recurring_issue_flag = true?

    A root-cause class exercise

    Hand out the rows and one question. The answer is in the data, not in the brief.

  • A software demo

    Believable remediations with device_id, device_type and device_location to fill a screen in front of a buyer.

Not quite right?

Make it yours.

Same 20 columns, your size and your rules. See 20 rows before you pay.

Preview 20 rows free

1,000 rows: $1.99 · 10,000: $12.99One-time. No subscription. All prices

This dataset125 rows20 columns
Yours1,000 rows20 columnsdevice_location: UK only

blueprint · edge-device-vulnerability-remediation-log

Behind this dataset

Same schema. As many rows as you need.

These 125 rows came out of a blueprint — 20 columns with generation rules behind each one. Open it in Data Factory to retune a column, add your own, wire in foreign keys, and run it at the size you actually need.

Rules it was built with
  • Each row represents one remediation event per device.
  • Include timestamp, device type, vulnerability severity, remediation action, and status.
  • Only log events with confirmed vulnerability detection.
  • Remediation actions must be mapped to standard procedures.
  • Devices must be tagged by operational zone.
  • Resolution status must be verified by automated system check.
Rows
Open the blueprint in Data Factory

1 credit per row. Preview 20 rows free. Buy rows for the full run.

Exports
CSV, JSON, JSONL, Parquet, SQL, Excel, TSV, XML
Licence
yours to use, including commercially
API slug
edge-device-vulnerability-remediation-log

What should your data show?

Preview 20 rows free
No signup. No card.