CISA to Oversee CVE Numbering Authorities for Industrial Control Systems (ICS) and Medical Devices

guest · Sep 16, 2020

CISA to Oversee CVE Numbering Authorities for Industrial Control Systems and Medical Devices
September 15, 2020
https://www.cisa.gov/news/2020/09/1...rities-industrial-control-systems-and-medical

WASHINGTON — The Common Vulnerabilities and Exposures (CVE®) Program announced today it is granting authority to the Cybersecurity and Infrastructure Security Agency (CISA) for managing the assignment of CVE Identifiers (IDs) for the CVE Program.

CISA, which sponsors the CVE Program, is now also designated a Top-Level Root CVE Numbering Authority for industrial control systems (ICS) and medical device vendors participating as CVE Numbering Authorities (CNA). CNAs are organizations authorized to assign CVE IDs for vulnerabilities affecting products within a distinct scope. A Top-Level Root CNA, such as CISA, manages a group of CNAs within a given domain or community and may assign CVE IDs to vulnerabilities.
Click to expand...

“Continuing to encourage public and transparent disclosure of industrial control systems and medical device vulnerabilities is a critical mission for CISA,” said Bryan Ware, Assistant Director for Cybersecurity at CISA. “This expansion will encourage more vendors to participate in the CVE program and allow CISA to better support stakeholders as they become more engaged.”
Click to expand...

CVE: CVE Program Partners with CISA to Protect Industrial Control Systems (ICS) and Medical Devices

Log in or Sign up

CISA to Oversee CVE Numbering Authorities for Industrial Control Systems (ICS) and Medical Devices

guest Guest

Log in or Sign up

CISA to Oversee CVE Numbering Authorities for Industrial Control Systems (ICS) and Medical Devices

guest Guest

Useful Searches