Our Commitment to Product Cybersecurity

At Leonton, cybersecurity is an integral part of how we design, customize, and support industrial networking products.

We are committed to strengthening product security throughout the product lifecycle—from secure development and vulnerability assessment to remediation and customer communication. Through a proactive, risk-based approach, we provide customers with security guidance to help protect their industrial networks and operational environments.

Vulnerability Assessment & Remediation

Leonton’s Product Security Incident Response Team (PSIRT), working closely with our product management and development teams, evaluates reported vulnerabilities using the Common Vulnerability Scoring System (CVSS) and recognized risk-assessment practices based on four key factors.

Global Regulatory & Industry Compliance 

Leonton continues to strengthen its product development and vulnerability-management processes in alignment with recognized industrial cybersecurity practices and evolving regulatory requirements, including EU Cyber Resilience Act (CRA), IEC 62443-4-1 (Secure product development lifecycle requirements), and IEC 62443-4-2 (Technical security requirements for industrial automation and control system components).

How to Report Cybersecurity Vulnerabilities

If you discover a potential vulnerability affecting a Leonton product, please report it to our Product Security Incident Response Team (PSIRT) as soon as possible. 

When submitting a vulnerability report, please include the following information whenever available:

1. Product name and model
2. Firmware/Software version
3. Equipment and software needed to replicate issues
4. Steps to recreate issues (attach pictures or codes if available)
5. Proof-of-concept exploit code
6. Description of how attackers can take advantage of the vulnerabilities
7. Packet capture (use a tool like Wireshark to achieve this)
8. Any other information you believe is relevant
9. email address: psirt@leonton.com
10. Download Leonton’s PGP key

Disclaimer

Depending on the circumstances of specific cases, the content of the ‘Cybersecurity Vulnerability Management Policy’ may be changed. We cannot guarantee specific issue responses or categories of issues. You will be responsible for any risks arising from using the information in this document or any content linked. Leonton reserves the right to revise any content in this document without prior notice. Any modifications in the document will be published on Leonton’s official website: www.leonton.com/cybersecurity.aspx