Industrial control systems vulnerabilities rise as operational tech increasingly goes online

Description

Summary

• Claroty said 25% more vulnerabilities were reported in 2020 than in 2019, 70% of which had high or critical CVSS scores.
• As mentioned above, 90% of vulnerabilities discovered in the second half of 2020 require no special conditions to trigger.
• The top five most prevalent Common Weakness Enumerations (CWEs) are all ranked highly on The MITRE Corporation's 2020 CWE Top 25 Most Dangerous Software Errors list due to their relative ease of exploitation and ability to enable adversaries to inflict serious damage," the report said.
• out-of-bounds read, which can allow an attacker to read memory and bypass security systems;