Report a vulnerability (Cyber Resilience Act)

Product Security Incident Response

Security of our products

If you have discovered a vulnerability or a security-relevant incident in an ALRE product, an associated app or an ALRE online service, please report it to us using this form. As a manufacturer, we are subject to the EU Cyber Resilience Act (Regulation (EU) 2024/2847). We report actively exploited vulnerabilities and severe security incidents to ENISA and the competent national CSIRT in accordance with Art. 14 CRA.

Report vulnerabilities and security incidents

Please describe as precisely as possible what you observed. Leave fields blank if you do not know the answer. Fields marked with * are required. For complaints, warranty claims or operating questions, please use our contact form.

This field is for validation purposes and should be left unchanged.

Affected product

Which product is affected? The type designation is printed on the device.

Type designation(Required)

Printed on the device, e.g. RTBSU-401.000#00.

Article number

Usually found only on the packaging or the delivery note. Leave blank if unknown.

Firmware / software version

Please provide if known.

Vulnerability or incident

Describe as precisely as possible what you observed. For anything you do not know, select ‘unknown’.

Type of report(Required)

Vulnerability: a flaw that could be exploited. Security incident: something has already happened. If in doubt: question about product security.

Detailed description(Required)

What did you observe? What conditions are required? Please include the steps to reproduce here. At least 150 characters.

Impact(Required)

What could an attacker achieve with this? If unknown, enter ‘unknown’.

Severity, your assessment(Required)

Your personal assessment, not an evaluation by ALRE.

To your knowledge, is the vulnerability already being actively exploited?(Required)

Operating environment(Required)

In what environment did you observe the issue? For example: a device in a heating system with gateway XY, a smartphone app on Android 14, or analysis of the firmware file on a PC without a device.

Has the vulnerability already been reported to others or published?(Required)

To whom / where?(Required)

Vulnerability type (CWE or CVE ID)

If known, e.g. CWE-79 or CVE-2026-…

Contact

We need an email address for follow-up questions. All other details are optional; a pseudonymous address is fine.

Email address(Required)

For follow-up questions.

Salutation

First name

Last name

Company

Country

Phone number

For urgent follow-up questions.