Cisco's Talos Intelligence Group Blog: From Box to Backdoor: Discovering Just How Insecure an ICS Device is in Only 2 Weeks

「Moxa Americas, Inc. was cooperative with us throughout the disclosure process of the discovered vulnerabilities by providing us the source code of their BusyBox implementation, covered under GPL2. Moxa has released the appropriate fixes for these vulnerabilities in their latest patch found here. Another forthcoming fix for TALOS-2016-0231 is expected in the near future.」らしい。うーーー。sonrtですかね。