← Product Security (PSIRT) overview
REPORT A VULNERABILITY
Have you identified a suspected or exploited vulnerability or a security incident affecting a Wieland Electric product with digital elements, an associated digital service placed on the market by Wieland Electric or infrastructure operated by Wieland Electric? Please use the form below to submit the relevant information to our responsible security teams.
Reports may also be submitted anonymously. However, providing your contact details enables us to acknowledge your report, ask follow-up questions and communicate with you during the CVD process.
What should be reported?
Please use this form to report:
- suspected or exploited vulnerabilities and security incidents affecting Wieland Electric products with digital elements;
- vulnerabilities and security incidents affecting associated digital services placed on the market by Wieland Electric;
- vulnerabilities and security incidents affecting infrastructure operated by Wieland Electric.
For general product enquiries, technical support or service requests, please use our regular contact channels. Compliance concerns and whistleblowing matters should be submitted through our Whistleblower and Complaints System.
→ Contact Wieland Electric
→ Whistleblower and Complaints System
Before you submit a report
Please provide as much relevant technical information as is available to you. A detailed report helps our teams validate, reproduce and assess the reported issue.
Where possible, please include:
- the affected product, device, component, digital service or infrastructure;
- the article number, serial number, affected URL and relevant hardware, firmware or software versions;
- the type of vulnerability and, if available, its CVSS score;
- a detailed technical description, including the location of the vulnerability and any affected interfaces or components;
- step-by-step instructions for reproducing the issue;
- relevant proof-of-concept material, log files, screenshots and details of any tools or configurations used;
- your assessment of the potential impact and severity;
- information about any known exploitation, previous disclosure or planned publication;
- contact details if you would like us to acknowledge your report, ask follow-up questions or provide information during the CVD process.
Before submitting your report, please check that all information and attachments are necessary for assessing the reported issue. Please avoid including unrelated personal data, access credentials, confidential third-party information or other information that is not required for processing the report.
Please ensure that any security research has been conducted in accordance with our CVD Policy. In particular, testing should not go beyond what is necessary to demonstrate the vulnerability and must not intentionally damage or disrupt systems, manipulate or destroy data, access information without authorisation or infringe the rights of third parties.
Please do not publicly disclose details of a potential vulnerability before Wieland Electric has had a reasonable opportunity to investigate the report and coordinate appropriate remediation and disclosure measures. Further information is available in our Coordinated Vulnerability Disclosure Policy.
Alternative reporting channels
The web form is our preferred reporting channel. If you are unable to use the form, you may contact us through one of the following functional mailboxes:
- PSIRT functional mailbox: psirt@wieland-electric.com
- CSIRT functional mailbox: csirt@wieland-electric.com
VULNERABILITY REPORTING FORM
Fields marked with an asterisk (*) are required. Your name and email address are optional. Anonymous reports are possible; however, without contact details we cannot acknowledge your report, ask follow-up questions or communicate status information.
Wieland Electric GmbH processes reporting parties' personal data solely for handling vulnerability reports, communicating during the CVD process, complying with legal obligations and, where applicable, publishing an acknowledgement with their express consent. Please avoid transmitting third parties' personal data. Further details are available in the Wieland Electric GmbH Data Privacy Statement.
WHAT HAPPENS AFTER YOU SUBMIT A REPORT?
Receipt and initial review
Our responsible security teams receive and classify the report, review the information provided and assign it to the relevant product, development or security team. If you have provided contact details, receipt of the report will be acknowledged in accordance with the response times defined in our CVD Policy.
Analysis and coordination
We assess the reported issue, its severity and the potentially affected products, services or infrastructure. Where necessary, we may contact you for further information. The responsible teams coordinate appropriate remediation or mitigation measures.
Remediation and communication
If a vulnerability is confirmed, Wieland Electric coordinates appropriate remediation or mitigation measures. Where necessary, affected users are informed about available security updates, workarounds or other recommended actions.
The timing and content of any public disclosure are coordinated in accordance with our CVD Policy and may involve the reporting party and relevant coordination partners.