Security News > 2020 > December > Vast Majority of OT Devices Affected by Urgent/11 Vulnerabilities Still Unpatched

A vast majority of operational technology devices affected by the Urgent/11 vulnerabilities and many devices impacted by the CDPwn flaws remain unpatched, IoT security firm Armis reported on Tuesday.
According to the company, 97% of industrial devices affected by the Urgent/11 vulnerabilities have not been patched.
Armis found that only 2.38% of Rockwell Automation devices and less than 1% of Schneider Electric devices affected by Urgent/11 have been patched since the disclosure of the vulnerabilities in July 2019.
The security holes are believed to affect hundreds of millions of devices - including industrial, enterprise and medical devices - and some of them can allow attackers to take control of targeted devices.
As for Cisco Nexus switches, the aviation and OT sectors lag behind, with more than 85% of devices unpatched.