Cyber Resilience Act (CRA)
Product Security and Reporting Security Vulnerabilities
In accordance with the requirements of the Cyber Resilience Act (CRA), we provide a dedicated channel for reporting potential security vulnerabilities. The CRA aims to strengthen the cybersecurity of products with digital elements throughout their entire lifecycle and to ensure the responsible handling of security vulnerabilities.
If you have identified a possible security vulnerability in a product or related software of D+H Mechatronic AG, you can report it to us using the contact details provided below.
Contact
- Affected product and product version
- Software or firmware version
- Description of the vulnerability
- Steps to reproduce the issue
- Potential impact optional supporting files, logs, or a proof of concept
Please do not publicly disclose information about an unresolved vulnerability before coordinated communication with us has taken place.
Coordinated Vulnerability Disclosure Policy
We review incoming reports and will contact the reporter if additional information is required.
Confirmed vulnerabilities are assessed and handled as part of our vulnerability management process. Necessary security measures and information for affected users will be provided according to the respective vulnerability.
We ask security researchers and other reporters not to disclose information about a vulnerability that has not yet been resolved without prior coordination with us, so that sufficient time is available for investigation, assessment and, where appropriate, the implementation of mitigation measures. Where possible, the disclosure of vulnerability information will be coordinated and agreed upon with the parties involved.
For other support or product-related inquiries, please use the regular contact channels of D+H Mechatronic AG.
