AVEVA’s Pipeline Simulation platform is facing a critical missing-authorization flaw that can let an unauthenticated attacker perform actions reserved for high-privilege users, including Simulator Instructor and Simulator Developer roles. CISA’s new industrial control systems advisory says the...