Reporting Process for Security Vulnerabilities
The security of our products, systems, and services is of the highest priority for Hedrich. If you have discovered a potential security vulnerability or a security-related incident, we kindly ask you to report it using one of the contact methods listed below.
Our Security Organization
Hedrich operates a centralized security organization for handling vulnerability reports and security-related incidents. This organization combines the responsibilities of the Product Security Incident Response Team (PSIRT) and the Computer Emergency Response Team (CERT) and serves as a central point of contact for customers, partners, security researchers, and authorities.
What Can Be Reported?
Product Vulnerabilities (PSIRT)
Please report security vulnerabilities or other security-related weaknesses affecting Hedrich products, software, firmware, or other digital solutions.
Security Incidents (CERT)
This contact point may also be used to report security-related incidents, such as suspicious activities or any events that could impact the information security of Hedrich or its customers.
If you are unsure whether your finding is relevant, you are still encouraged to submit it using the contact channels provided below.
Information for a Report
Please include the following information in your report:
- Description of the vulnerability, including proof-of-concept code, screenshots, log files, or network traces (if available)
- Affected product or system, including system type, serial number, and project number (if applicable)
- Vulnerability details such as CWE-ID, CVE-ID, severity, potential impact, and whether the vulnerability is already publicly known (if available)
- Consent to acknowledge your contribution as the reporting party in a future Hedrich Security Advisory (if published)
Contact the Hedrich PSIRT or CERT Team
For security-related questions regarding our products or infrastructure, or to report potential security issues, please contact us using the channels listed below. We accept reports in German and English. For confidential information, we recommend using encrypted communication. An initial response is usually provided within one business day.
Hedrich PSIRT – Contact for Products, Solutions, and Services
E-Mail: psirt@hedrich.com
PGP Public Key and Fingerprint:
Subscribe to Hedrich Newsletter