1 Advisory Published – 1-18-24

Today, CISA’s NCCIC-ICS published one control system security advisory for products from Aveva. I also take a down-the-rabbit-hole look at delayed publication of CVE’s in 2024.

Aveva Advisory

This advisory describes two vulnerabilities in the Aveva PI Server. The vulnerabilities are self-reported. OSI Soft has a new version of the Aveva PI Server that mit…