Cybersecurity

Reporting a potential security vulnerability

Contact for reporting a potential security vulnerability: smgw.security(at)efr.de

Vulnerability information is extremely sensitive. We strongly recommend that all security vulnerability information sent to EFR be encrypted using the PGP/GPG key.

Certified Products under European Cybersecurity Certification (EUCC)

EFR offers high-security products certified under the EUCC Regulation (EU 2024/482).

The validity period for an EUCC product certificate is established in accordance with the EUCC regulation. The product will be maintained during the validity of its certificate.

Vulnerabilities are listed on ENISA’s European Vulnerability Database (EUVD): https://euvd.enisa.europa.eu/