Cybersecurity

Security Vulnerability Reporting

Reporting Vulnerabilities

E. Dold & Söhne GmbH & Co. KG takes the security of its products with digital components seriously. We welcome reports of potential vulnerabilities that could compromise the confidentiality, integrity, availability, or authenticity of our products.

If you have discovered a potential vulnerability in a product, we ask that you report it to us responsibly.

Contact

E-Mail: psirt@dold.com

Please provide the following information if possible:

• Product name
• Product version or firmware version
• Description of the vulnerability
• Steps to reproduce the issue
• Potential impact
• Contact information for follow-up questions

Responsible Disclosure

We ask that you

• not disclose vulnerabilities publicly before DOLD has had sufficient opportunity to analyze and address them,
• not take any actions that could endanger customers, systems, or data,
• and conduct only the investigations necessary for the report.

Data Protection

The information submitted as part of a vulnerability report will be used exclusively to address and resolve the reported issue.

Reporting Process

Incoming reports are received by the CRA coordinator, who serves as the single point of contact, and are treated confidentially.

The reported vulnerability is assessed in terms of its impact and exploitability.

Where required by law, reports are submitted to the relevant authorities in accordance with the provisions of the Cyber Resilience Act (CRA).