A vendor releases a patch for a critical CVE on the city's WLAN controllers. What is the appropriate mitigation when a fix exists?
Select an answer to reveal the explanation.
Short Explanation
When the vendor hands you a patch for the city controllers, use it. Wiki notes and cosmetic renames are not a substitute for fixing the hole.
Full Explanation
When a vendor patch or upgrade exists for a WLAN infrastructure CVE, applying that remediation is the appropriate mitigation. Cosmetic management-plane renaming or indefinite deferral without controls leaves exposure in place. Unrelated RADIUS accounting changes do not remediate controller remote-code issues.