Report product security vulnerabilities
Belimo is committed to the security of our products and services. If you believe you have found a security vulnerability, we appreciate your responsible disclosure so we can investigate and address it promptly.
Please use this page to submit an encrypted email with enough detail to reproduce the issue.
As information about vulnerabilities and vulnerability claims are critical, we prefer to receive this information encrypted. We thereby kindly ask you to use our PGP key to encrypt the information when you report a potential security vulnerability to Belimo PSIRT.
PGP Key
PGP Fingerprint: 6AA11FB41B5A79A463177C9107E045CDFA299EF0
Please send an email to psirt@belimo.com, including the following information:
- Name (optional)
- Surname (optional)
- Country (optional)
- Organisation name (optional)
- Products and/or versions impacted (required)
- Issue description (required)
- Vulnerability type [CWE ID if available] (optional)
- Attachments (optional)
The product security team will review your submission and respond as soon as possible. Thank you for helping us protect our customers and systems.
Privacy disclaimer
When you disclose a vulnerability to Belimo, we collect the details you provide in the form. We retain such information for administrative purposes, to respond to you, and to track further correspondence during the investigation of the reported vulnerability.
For more information on how we may process your personal data, please see:
Coordinated vulnerability disclosure (CVD) policy
-
Coordinated Vulnerability Disclosure Policy
(pdf -
217 KB)
Security updates & fixed vulnerabilities
New firmware and software releases can be downloaded here:
Stay up to date
Sign up now to receive updates about product security topics.