Re: Of course they're not patching
That's nonsense. The majority of the storage vendors do not allow external programs to execute on the storage array itself, therefore since its only passing data or executing firmware code only written by the vendors, the need to patch is unnecessary. It has nothing to do with liability or vulnerability of the system.