ECKOLD’s Product Security Incident Response Team (PSIRT) is the central point of contact for reporting potential security vulnerabilities, incidents and other security issues related to ECKOLD products, solutions and services. Please submit your report to: psirt@eckold.de
We treat all submitted information confidentially. No non-disclosure agreement is required to report or discuss a potential security vulnerability. ECKOLD does not currently operate a bug bounty programme.
To help us assess your report effectively, please provide the following information where available:
- Reporter details: If you prefer to remain anonymous, we will respect your request. Otherwise, please provide an email address and telephone number for follow-up questions, as well as your organisation, if applicable.
- Type of vulnerability: Please describe the vulnerability, for example cross-site scripting (XSS), buffer overflow or hard-coded credentials.
- Evidence and reproducibility: Where possible, provide a proof of concept (PoC), sample code or, alternatively, network traces such as PCAP files. A clear description of the steps required to reproduce the vulnerability is also helpful.
- Potential impact: Please describe any actual or potential effects of the vulnerability that you have observed.
- Affected components: Identify the ECKOLD product, solution or service in which you identified the vulnerability. Please include available details such as product family, product group, firmware or software version; for services, please also provide the relevant URL.
- Disclosure status: Please let us know whether the vulnerability has already been disclosed publicly or whether a disclosure is planned.
The ECKOLD PSIRT will acknowledge receipt of your report within three working days. Thank you for your report and your support in helping us improve the security of our products, solutions and services, as well as that of our customers.