Coordinated Vulnerability Disclosure

Weidmüller Product Security Incident Response Team (PSIRT)

Report a vulnerability

If you have found a vulnerability in our products, please do not hesitate to contact us. We prefer contact by e-mail using PGP encryption. The e-mail address to be used and the required PGP public key including fingerprint can be found in the information opposite.

To enable us to process your vulnerability report in a structured manner, please provide the following information:

- Product name
- Product number
- Firmware/Software version
- Description of the finding
- Type of the vulnerability (CWE category)
- Steps for reproducibility
- Disclosure requirements
- Your contact information (E-Mail or phone number)

E-Mail: psirt@weidmueller.com

Download PGP public key

Fingerprint: F8CF103F8C3296464AFB6F4C82A673D90A48230D

Code of conduct for reporting a vulnerability

What we promise

We provide feedback on every reported vulnerability
Reported data will only be shared with authorised persons
The identity of the reporter will not be published unless the reporter explicitly requests it

What we expect from the reporter

The reported vulnerability has not yet been published
Submission of valid vulnerability information (see "Report a vulnerability")
Please provide valid contact information
No criminal offence has been committed by the reporter (e.g. vulnerability abused, third-party infrastructure attacked, data manipulated)

Hall of Thanks

Weidmüller sincerely thanks all reporters for their contributions in submitting vulnerability reports. Each report plays an important role in helping us achieve the highest standards of integrity and security in our products.

2025

Quentin Kaiser (Onekey GmbH)

Lead Security Researcher

February 2025

Abhishek Kumar

Security Researcher

August 2025

Harsh Maheta

Security Analyst

August 2025

Gaurang Maheta

Penetration Tester