Security & Vulnerability Disclosure
LMI Technologies is committed to maintaining the security and integrity of our products and services. We welcome responsible disclosure of vulnerabilities and work collaboratively with security researchers to investigate and remediate reported issues.
LMI Technologies is aware of the requirements of the EU Cyber Resilience Act (CRA) and is committed to complying
with all applicable obligations.
The EU Cyber Resilience Act (CRA) introduces mandatory, EU-wide cybersecurity requirements for all Products with Digital Elements (PDEs) that LMI Technologies places on the EU market. For detailed information on the CRA, please visit the official European Union website.
Report vulnerabilities via email to [email protected] for coordinated investigation and remediation.
What to Include:
• Affected product, software, or service
• Firmware or software version
• Technical description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested mitigation, if known
Responsible Disclosure Guidelines:
• Do not publicly disclose before coordinated resolution
• Do not access, modify, or delete customer data
• Do not disrupt systems or services
• Act in good faith and comply with applicable laws
• Allow reasonable time for investigation and remediation
Coordinated Vulnerability Disclosure
Vulnerability Submission Process
If you believe you have identified a security vulnerability affecting an LMI Technologies product, service, software platform, or website, we encourage you to report it responsibly through the channels provided below.
- Submit reports with as much technical detail as possible by form or by email to [email protected]
- Include affected products, firmware versions, or software versions.
- Provide reproduction steps and supporting evidence where available.
- Include screenshots, logs, proof-of-concept code, or network traces if applicable.
- Do not publicly disclose vulnerabilities prior to coordinated resolution.
- Report vulnerabilities in good faith and avoid disruption to systems or services.
Response Timeline
LMI Technologies reviews all vulnerability submissions and works to investigate and remediate verified security issues in a timely and coordinated manner.
- Vulnerability reports will be acknowledged within 5 business days.
- Submissions will be reviewed and triaged based on severity and impact.
- Researchers may be contacted for additional technical information.
- Status updates may be provided during active investigations.
- Verified vulnerabilities will be prioritized for remediation.
- Public disclosure should occur only after coordinated resolution with LMI Technologies.
Safe Harbor
LMI Technologies supports responsible security research conducted in good faith and in accordance with this policy.
- Act in good faith to avoid privacy violations, service disruption, or data destruction.
- Do not access, modify, or delete customer or company data.
- Do not perform denial-of-service attacks or social engineering activities.
- Do not exploit vulnerabilities beyond what is necessary to demonstrate impact.
- Testing must not intentionally disrupt production systems or services.
- LMI Technologies will not pursue legal action against researchers acting in good faith and in compliance with this policy.
Security Advisories
LMI Technologies may publish security advisories for verified vulnerabilities that impact customers, products, or software platforms. Advisories will be published as Product Notifications in our Product Downloads repository.
- Security advisories may include vulnerability descriptions and affected versions.
- Remediation guidance or mitigation steps may be provided where applicable.
- Firmware, software, or platform updates may accompany advisory publications.
- Coordinated disclosure timelines will be determined based on severity and customer impact.
- Public advisories may reference CVE identifiers when applicable.
- Customers are encouraged to maintain current firmware and software versions to reduce security risk.