Cybersecurity and Information Security
Coordinated Vulnerability Disclosure (CVD)
At Löwenstein Medical Technology GmbH & Co. KG, the security of our products, the protection of patients, and the trust of our customers are our highest priorities. Despite careful development and technical and organizational security measures, vulnerabilities may occur in complex products, software solutions, and digital services.
We therefore support the responsible reporting of potential vulnerabilities by customers, security researchers, partners, and other stakeholders. Our Coordinated Vulnerability Disclosure (CVD) process enables structured, transparent, and trusted collaboration to review, assess, and appropriately remediate reported vulnerabilities. This supports our vulnerability management in line with relevant standards and regulatory requirements, including the Cyber Resilience Act (CRA).
If you have identified a potential vulnerability in a product, software solution, or digital service from Löwenstein Medical Technology GmbH + Co. KG, we ask you to report it via our security contact. Please describe the issue in as much detail as possible so that we can conduct the investigation efficiently.
After receiving a report, we carefully review the information provided, stay in contact with the reporter, and coordinate the necessary measures to minimize risk. Where required, we inform customers, users, and competent authorities in accordance with applicable regulatory requirements.
We welcome security research and responsible behaviour. Together, we make an important contribution to the security of medical devices and digital health solutions.
What we expect from you
- Report potential vulnerabilities confidentially via our security contact.
- Describe the issue as clearly and comprehensively as possible.
- Do not disclose vulnerabilities before analysis, assessment, and, where applicable, remediation measures have been completed.
What you can expect from us
- We review reported vulnerabilities carefully and transparently.
- We maintain open and constructive communication.
- We treat your personal data confidentially and do not share it without your consent.
Known Security Advisories
There are currently no known vulnerabilities affecting our products that require a public security advisory.