KEPServerEX does not properly validate certificates from clients which may allow unauthenticated users to connect. CreditsShawn HoffmanReferenceshttps://www.cisa.gov/news-events/ics-advisories/icsa-23-334-03