PSIRT

 Cybersecurity for our products is a top priority at Novotechnik. Through the PSIRT, we coordinate the receipt, assessment, handling, and responsible disclosure of vulnerabilities relevant to product security. Our goal is to quickly analyze potential security risks, develop appropriate countermeasures, and provide our customers with transparent information. In doing so, we adhere to the requirements of the Cyber Resilience Act (CRA) as well as established processes of the Coordinated Vulnerability Disclosure (CVD). Together with customers, partners, and security researchers, we contribute to the continuous improvement of our products’ security.

Policy on the Disclosure of Security Vulnerabilities (CVD) 

To address security vulnerabilities in Novotechnik products, the PSIRT publishes a standardized security advisory that provides detailed information about the vulnerability. This advisory lists the affected components and describes workarounds or available fixes to address the vulnerability. 

 Disclosures are coordinated with the reporter, involved vendors, and relevant authorities to the extent possible. Details of the exploit are not disclosed until the risk can be adequately mitigated. 

For more information about the CVD process, see our description of the vulnerability management . 

Report Security Vulnerabilities 

Anyone can submit information about potential security vulnerabilities to Novotechnik’s PSIRT via email. We ask that you notify us immediately of any security vulnerabilities you discover. 

psirt@novotechnik.de 

Please mention us in your eemail to help us process your request more quickly: 

• Affected product, including order code and the software version 
• Contactcontact information such as email address and phone number, if desired 
• Technical Description of the potential security vulnerability 
• When and wwas the potential security vulnerability discovered  
• Has the security vulnerability already been disclosed, or do you have specific plans to disclose it? 

The Novotechnik PSIRT team acknowledges receipt of new reports regarding security vulnerabilities within a few business days and thanks all reporters for their efforts in helping us continuously improve our products. 

Since information regarding security vulnerabilities and suspected security vulnerabilities is sensitive, we ask that you encrypt this information using our PGP key before sending it to us.  

PGP fingerprint: 6934 2AE2 5A5E 2DBC C170 7884 766E 0AD9 AB57 125D 
PGP Public Key: Novotechnik PSIRT Key