Version 19102026

Coordinated Vulnerability Disclosure

At LEM Elettronica s.r.l., the security of our electronic devices, embedded firmware, and configuration software applications is a top priority. In accordance with the European Cyber Resilience Act (Regulation (EU) 2024/2847), we maintain an open and transparent Coordinated Vulnerability Disclosure (CVD) policy. We encourage security researchers, installers, and users to promptly report any vulnerabilities or weaknesses identified in our products.

Official Contact Channel

To submit a confidential report:
mail: security@lemelettronica.it
Recommended subject line: [VULNERABILITY REPORT] Device model with a brief description

Guidelines for Researchers and Responsible Conduct

We encourage anyone who discovers or intends to report a vulnerability to collaborate responsibly in accordance with the following guidelines:

• Avoid causing physical damage to devices or installations, or disrupting services for end users.
• Keep technical information confidential until the relevant patch is available.
• LEM Elettronica will acknowledge receipt of the report within 72 business hours and maintain an open, transparent, and collaborative channel for technical discussion.

SLA Table (Service Level Agreement)

Archive of Published Security Advisories

• No security vulnerabilities identified