Cybersecurity is an integral part of the design, development and maintenance of Medcom products. We are developing our product security processes in accordance with the requirements of the Cyber Resilience Act (CRA) and good practices for vulnerability management in industrial products.
Report a Vulnerability or Security Incident
If you identify a potential vulnerability, suspicious behaviour or a security incident affecting a Medcom product, software or service tool, please provide us with the information necessary to analyse the issue.
Product security reports are analysed by personnel responsible for product cybersecurity in cooperation with the relevant technical team. Depending on the outcome of the analysis, appropriate risk mitigation measures are implemented, fixes or recommendations for users are prepared and, where required by applicable regulations, the relevant regulatory reporting procedure is initiated.
You may also use the form below:
What Happens After You Submit a Report?
- We register the report and perform an initial assessment.
- We identify the affected product and potentially affected versions.
- The relevant technical team analyses whether the issue can be reproduced and assesses its potential impact.
- We determine the required security, corrective or informational measures.
- If the event is subject to a reporting obligation under the CRA or other applicable regulations, the relevant regulatory reporting procedure is initiated.
- Where a risk is confirmed, we provide the relevant information to affected customers / users.
Please keep information concerning a potential vulnerability confidential until the further course of action has been agreed with Medcom.
Technical and Service Matters
Standard technical faults, warranty claims, service-related questions and issues unrelated to cybersecurity should be reported through Medcom’s regular contact channels.