Vendor self-disclosure and patch timing

Rockwell folds four RSLinx Classic CIP crash flaws into a single 4.60 upgrade

The four CVEs share one patch target and one recovery step, a manual service restart, but CISA's advisory carries no CVSS metrics and no per-CVE mapping, so the only axis an OT team can rank them on is network reachability.