Security & Vulnerability Reporting

Found a security vulnerability? Please report it to us.

The security of our products is a top priority for us. If you have discovered a potential vulnerability in an FSM AG product, we ask that you report it to us responsibly. We take every report seriously and will promptly analyze it and—where necessary—resolve the issue.

Contact: security@fsm.ag

What Your Report Should Include

To help us evaluate your report quickly, please provide the following information:

• Affected product and—if known—hardware revision and firmware version
• Description of the vulnerability and its potential impact
• Steps to reproduce the issue (proof of concept, configuration, environment)
• Your contact information for follow-up questions (anonymous reports are also accepted)

What You Can Expect From Us

• Confirmation of receipt within 3 business days
• Initial assessment within 10 business days
• Regular updates on the status of the issue until it is resolved
• Recognition as the discoverer in our security advisory, if you so desire

Our Commitment to You

We operate in accordance with the principles of Coordinated Vulnerability Disclosure (based on ISO/IEC 29147). Anyone who discovers a vulnerability in good faith and reports it to us responsibly will not face any legal action from us. In return, we ask that you:

• Give us reasonable time to analyze and resolve the issue before you publish any information. We are happy to coordinate the timing of any publication with you.
• Do not access third-party data, do not modify or delete any data, and do not compromise the availability of our systems or those of our customers.
• Use the information you have obtained solely for the purpose of reporting it to us.

Scope

This reporting channel applies to all FSM AG products, particularly those in the areas of measurement technology (feel®), inrush current limiters (TSR), and battery management systems (BMSafe), including the associated firmware.
We will forward any reports regarding products that we manufacture on behalf of customers to the respective manufacturer, to the extent possible and permissible.
For general product inquiries and support, please contact us through our regular channels.