Responsible disclosure of vulnerabilities

If you have discovered one or more vulnerabilities in MENNEKES products or IT infrastructure, please feel free to contact us in confidence. If you have found vulnerabilities in IT products, systems, or services from other manufacturers or product owners outside the MENNEKES Group, you should first report the vulnerability to the respective manufacturer or product owner. If they do not respond, you may also report the vulnerability to MENNEKES. MENNEKES expects adherence to the MENNEKES Coordinated Vulnerability Disclosure (CVD) Policy. This policy defines what we expect from reporters and how MENNEKES handles incoming vulnerability reports. You can find the CVD Policy here.

You can reach us for product vulnerability handling via email at psirt(at)mennekes.de and for infrastructure vulnerability handling at csirt(at)mennekes.de. Alternatively, you can submit your vulnerability report anonymously using the form below.