I Can'T Patch My OT Systems! a Look at CISA'S KEVC Workarounds and Mitigations for OT

We examine the state of publicly available information about known exploitable vulnerabilities applicable to operational technology OT environments. Specifically, we analyze the Known Exploitable Vulnerabilities Catalog KEVC maintained by the US Department of Homeland Security Cybersecurity and...