Fixed software is the vendor-supplied release that corrects a known vulnerability and should replace the affected build. It may be a full version update, a maintenance patch, or a rebuild that includes the security correction. In practice, the “fixed” version is the one defenders compare against when checking whether a device or application is still exposed.
This matters because attackers often target systems that have not been moved to the fixed release, especially internet-facing infrastructure and appliances that are hard to patch quickly. Security teams use advisories, CVE lists, and version inventories to confirm whether the vulnerable build is still installed and to plan remediation. Installing fixed software is usually the primary defense, while compensating controls such as access restrictions or segmentation can reduce risk until the update is deployed.