CVD Report Form

Se hai individuato una possibile vulnerabilità di sicurezza in uno dei nostri prodotti, puoi segnalarcela tramite il modulo dedicato qui sotto.

Le informazioni ricevute ci aiuteranno a verificare il problema e a gestirlo nel modo più appropriato. Ti invitiamo a fornire tutti i dettagli utili a facilitare l’analisi della segnalazione.

A short title that summarizes the vulnerability you are reporting.

Discovery date and time

When you discovered the vulnerability.
Affected products
The product or service and the version affected by the vulnerability. Add one row per affected product. At least one product is required.
The class or type of the vulnerability, from the CWE taxonomy.
Whether this vulnerability is being actively exploited in the wild.
Code used to test or demonstrate the vulnerability, or any other substantial evidence. It will be treated as plain, non-executable text.
Optional file supporting your proof of concept. Allowed types: txt pdf png jpg jpeg log json csv. Maximum size: 3 MB.
The tools and the steps needed to reproduce the vulnerable behaviour.
Threat and risk assessment of the threats and risks you identified.
Your overall assessment of the risk level.
Other products, components, services or vendors you believe are affected; the software or device configuration at the time of discovery; and relevant details on connected components or secondary devices involved in the interaction.
Your intentions regarding embargo and publication timelines. We ask you to keep any communication about the vulnerability confidential until it is publicly disclosed, and to coordinate with Caleffi on shared disclosure plans.
The date until which you intend to keep the vulnerability confidential.
The date on which you plan to publicly disclose the vulnerability. Required when you plan a public disclosure.

Your personal data is handled as described in our Vulnerability Disclosure Policy. Processing your email address is required for the purposes it describes: it is our only channel to acknowledge your report and keep you updated on its status.

Questo sito è protetto da reCAPTCHA e vengono applicate l'Informativa sulla privacy e i Termini di servizio di Google.