The security of our products is our top priority.
HT Heiztechnik regards the cyber security of its products as a key element of its responsibility towards its customers. If you have discovered a potential security vulnerability in our products or systems, please report it in accordance with the guidelines below.
How to report a vulnerability
Please send your report to: product_security@hargassner.at To enable a swift and effective analysis, please include the following information in your report:
- Description of the vulnerability – a detailed description of the nature of the issue, including the potential security impact (e.g. unauthorized access, data disclosure, disruption to device operation, or whether the vulnerability is being actively exploited)
- Product – name and model of the device
- Software/firmware version – as precise a version as possible (version number, build date, if available)
- Device serial number (if the issue relates to a specific unit)
- Reproduction steps – where possible, how to reproduce the problem
- Technical evidence – screenshots, logs, PoC code (if available)
- Reporter’s contact details – for further communication (reports may be submitted anonymously, though this will hinder the investigation process)
What happens after a report is submitted
- We will confirm receipt of the report within [2 working days]
- In accordance with the requirements of the Cyber Resilience Act (EU Regulation 2024/2847), should an actively exploited vulnerability be confirmed, HT Heiztechnik will make the appropriate report to the relevant CSIRT within 24 hours of forming a reasonable suspicion
- We will keep you informed of progress in analyzing and rectifying the vulnerability
- Please treat the report as confidential until a public announcement or patch is issued (responsible disclosure)
Principles of responsible reporting
Please do not test the vulnerability on products currently in use by other customers without their consent, and do not disclose information about the vulnerability publicly before agreeing on a timeline with HT Heiztechnik.