CVD Report Form

If you have identified a potential security vulnerability in one of our products, you can report it using the dedicated form below.

The information you provide will help us investigate the issue and handle it appropriately. Please include all relevant details that may help us analyze your report.

A short title that summarizes the vulnerability you are reporting.

Discovery date and time

When you discovered the vulnerability.
Affected products
The product or service and the version affected by the vulnerability. Add one row per affected product. At least one product is required.
The class or type of the vulnerability, from the CWE taxonomy.
Whether this vulnerability is being actively exploited in the wild.
Code used to test or demonstrate the vulnerability, or any other substantial evidence. It will be treated as plain, non-executable text.
Optional file supporting your proof of concept. Allowed types: txt pdf png jpg jpeg log json csv. Maximum size: 3 MB.
The tools and the steps needed to reproduce the vulnerable behaviour.
Threat and risk assessment of the threats and risks you identified.
Your overall assessment of the risk level.
Other products, components, services or vendors you believe are affected; the software or device configuration at the time of discovery; and relevant details on connected components or secondary devices involved in the interaction.
Your intentions regarding embargo and publication timelines. We ask you to keep any communication about the vulnerability confidential until it is publicly disclosed, and to coordinate with Caleffi on shared disclosure plans.
The date until which you intend to keep the vulnerability confidential.
The date on which you plan to publicly disclose the vulnerability. Required when you plan a public disclosure.

Your personal data is handled as described in our Vulnerability Disclosure Policy. Processing your email address is required for the purposes it describes: it is our only channel to acknowledge your report and keep you updated on its status.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.