Reporting Security Vulnerabilities at Kontron Technologies

If you have identified a vulnerability in a Kontron product, please contact our Product Security Incident Response Team (PSIRT): security@kontron-technologies.com. Provided that the appropriate access to the Kontron Technologies ticket portal is available, the request can be submitted there as well.

Please provide the following information if possible:

• Product name and version
• Description of the vulnerability
• Potential impact
• Conditions required to reproduce the issue
• Step-by-step instructions for reproducing the issue
• Proof of concept or technical evidence (if available)

Kontron Technologies also accepts reports of vulnerabilities in third-party components (open source or commercial) that are part of a Kontron Technologies product.

Please also use the PSIRT channel if you have information regarding a security-related incident involving a Kontron product, such as:

• Active exploitation of a vulnerability
• Unauthorized access
• Tampering with a product
• Malware infection
• Other security-related events

If possible, please include information about the affected product, the time of the incident, the impact, and any available technical evidence.

Vulnerabilities in Kontron Technologies' websites, portals, or IT infrastructure can be reported to the following address: security@kontron-technologies.com

Upon receipt of a report, an acknowledgment of receipt is issued within five business days. The report is then subject to an initial assessment within ten business days. Further prioritization and processing are conducted on a risk-based basis. Where possible, the reporting individuals are kept informed of the progress of the processing on an ongoing basis.