Your reports help us continuously improve the security of our products. Through this page, customers, partners, security researchers, and other third parties can confidentially report potential vulnerabilities or security issues to our Product Security Team. Every report is carefully reviewed and processed as quickly as possible.
For reporting vulnerabilities, security-relevant malfunctions or configuration issues in barox products (switches, media converters, accessories) and their firmware. For general support requests, please use the regular support channels.
We follow the principle of coordinated disclosure: we confirm receipt of your report, investigate it with priority, keep you informed of progress on request, and coordinate the timing of any publication with you. We ask you not to publish details of the vulnerability before a fix is available. We will not pursue legal action against reporters who act in good faith and follow these principles.
Do not submit confidential customer data, passwords or production credentials. Replace such values in logs and screenshots with placeholders. Personal data must be limited to what is strictly necessary.
You can decide whether or not to provide your contact details. If you do provide them, we can contact you directly if we have any follow-up questions and keep you informed about the status of your report. Of course, you may also submit your report anonymously.
As a manufacturer, barox handles vulnerability reports in accordance with the EU Cyber Resilience Act (CRA), including the notification obligations towards the competent authorities for actively exploited vulnerabilities and severe security incidents.
Alternatively, you can reach our security team at security@barox.ch.
