Coordinated Vulnerability Disclosure

Weidmüller Product Security Incident Response Team (PSIRT)

Report a vulnerability

If you have found a vulnerability in our products, please do not hesitate to contact us. We prefer contact by email using PGP encryption. The email address to be used and the required PGP public key including fingerprint can be found in the information opposite.

To enable us to process your vulnerability report in a structured manner, please provide the following information:

- Product name
- Product number
- Firmware/Software version
- Description of the finding
- Type of the vulnerability (CWE category)
- Steps for reproducibility
- Disclosure requirements
- Your contact information (E-Mail or phone number)

E-Mail: psirt@weidmueller.com

Download PGP public key

Fingerprint: F8CF103F8C3296464AFB6F4C82A673D90A48230D

Code of conduct for reporting a vulnerability

What we promise

We provide feedback on every reported vulnerability
Reported data will only be shared with authorized persons
The identity of the reporter will not be published unless the reporter explicitly requests it

What we expect from the reporter

The reported vulnerability has not yet been published
Submission of valid vulnerability information (see “Report a vulnerability”)
Please provide valid contact information
No criminal offense has been committed by the reporter (e.g. vulnerability abused, third-party infrastructure attacked, data manipulated)