Product security and vulnerability reporting
The security of our products is our top priority. To enable our customers and business partners to report potential vulnerabilities in our products with digital elements, we have established a Product Security Incident Response Team (PSIRT).
This is our central point of contact for identifying, investigating, and remediating security risks in our products with digital elements. Our PSIRT publishes security advisories on confirmed, exploitable vulnerabilities for which remediation or mitigation measures are available.
Report a vulnerability
If you have discovered a security vulnerability in one of our products, we ask that you report it confidentially. We support the principle of responsible disclosure to ensure the security of all users.
Please send your findings by email to: psirt@lenord.de
Information required
To enable our team to review and remediate the vulnerability as quickly as possible, we need a detailed description. Please provide us with the following information:
- Affected product: Please state the type key and, in addition, the name of the product
- Version: The exact version number or model number of the affected component, if available
- Type of vulnerability: Please describe the security issue (e.g., replay attacks, anti-rollback, buffer overflow, supply chain vulnerabilities)
- Instructions: Please explain how the vulnerability can be exploited
- Proof of concept: Sample code, screenshots, or system logs (if available)
- Impact: Potential risks to systems, data, or users if the vulnerability is exploited
Our process after your report
Upon receipt of your report, we will confirm it promptly and subject the finding to an internal security analysis. If the vulnerability is confirmed, our experts will promptly develop an appropriate remediation measure (e.g., a patch or firmware update) and transparently inform affected customers via corresponding security advisories.
Thank you for your contribution to improving our product security!