ok.. so we havethe facts. now who bearsresponsibility for damages? the company using these flawed systems instead of upgrading or pressuring their vendors..... ? at the scale of critical infrastru ture thatcomes down to contractual terms. if the vilns and recommendations have been disclosed, and thatswhat the contract required...... notsellers fwult in my book. fixes arent free, and these decisions will bebased on either a risk analasys, or blind ignorance, depending on who is involved. if products really. are eol and eos, per contract, then fair enough... your license to use them probqblyexpires anyway.

still, hardto paintthis in a good light..... smells bad.