The CVE Program Recognizes Dragos as a Numbering Authority for Common Vulnerabilities and Exposures
Summary: The CVE Program designated Dragos as a CVE Numbering Authority on September 20, 2022, authorizing the company to assign CVE IDs to newly discovered vulnerabilities and publish CVE Records, including for its own products and for third-party products not covered by another CNA. Dragos said its OT-CERT team will coordinate with original equipment manufacturers on disclosures and will publish newly assigned CVE IDs and corrections to existing records under its Vulnerabilities Policy.
Bottom line: Dragos joins 237 global CVE partners across 35 countries, and its CNA authority extends to ICS/OT vulnerabilities found in third-party products no other CNA covers - the flaws in industrial gear that asset owners most need named early and accurately.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026