What is the ROPEX PSIRT?
The PSIRT is the central reporting center for security vulnerabilities in ROPEX products. It investigates every report, coordinates internal remediation efforts, and publishes security advisories regarding confirmed vulnerabilities.
What Happens to Your Report
We will confirm receipt within 24 hours and contact you after our initial assessment. We treat your identity and contact information confidentially and do not share them with third parties. Upon request, we will credit you in a subsequent security advisory.
Report a vulnerability
[email protected]
Reports may be submitted in German or English.
This information helps us
- Affected product with model number and, if known, firmware or software version
- Type of vulnerability, impact, and how you discovered it
- Steps to reproduce the issue, preferably with screenshots, logs, or a proof of concept
- CVSS score, if available
- Whether the information is known to third parties or has already been published
- Your contact information, if you would like a response
Before Publication
ROPEX controllers manage processes in active production facilities, some of which are part of critical infrastructure. Therefore, please coordinate any public disclosure with us in advance so that users can take appropriate action. Anyone acting in good faith and not disrupting operations need not fear legal action from ROPEX. Please do not test on devices in live production environments.
Security Advisories
We publish security advisories regarding confirmed vulnerabilities under Security Advisories.
Questions About Cybersecurity
Technical Support answers questions about the safe operation of our products. Please send your inquiry by email to [email protected].