Match an exact Cisco OS and release against OpenVuln. Not a device verdict. Platform model required for ASA, FTD, FXOS, and NX-OS — limits.