SPINNER Werkzeugmaschinenfabrik GmbH takes the security of its products and digital systems very seriously. We provide a defined process for reporting potential vulnerabilities and security-related information in a structured manner.
Reporting Channel
Security vulnerabilities can be reported at any time to the following address.
What can be reported
The following security-related issues can be submitted via this channel:
- Vulnerabilities in products with digital components (e.g., controls, software, networked functions)
- Misconfigurations or implementation errors with security implications
- Security-related incidents involving our products or systems
This channel is intended exclusively for security-related reports. For general technical support or service inquiries, please use the regular contact channel (Service).
Required Information
Please provide the following information, if available:
- Affected product or system (including serial number and software/firmware version)
- Description of the vulnerability or security-related incident
- Impact and potential risks
- Steps to reproduce
- Supporting technical information (e.g., logs, screenshots)
Handling of reports
Upon receipt of a report, the following steps are taken:
- Prompt acknowledgment of receipt
- Assessment of the reported information regarding relevance and criticality
- If necessary, follow-up to clarify technical details
- Initiation of appropriate measures for analysis and resolution
SPINNER treats all reports confidentially and discloses information exclusively to authorized internal departments and, if necessary, to involved third parties and competent authorities.
Coordinated disclosure of vulnerabilities
We ask that security vulnerabilities be treated confidentially as part of a coordinated vulnerability disclosure (CVD) process until the vulnerability has been resolved.