Product security and reporting of security vulnerabilities

ITH places great importance on the security of its products and digital solutions.

Despite careful development practices, it cannot be ruled out that security vulnerabilities may be discovered.

If you have identified a potential vulnerability in an ITH product, software application, cloud application, or digital service, we kindly ask you to report it to us responsibly.

Our Product Security Incident Response Team (PSIRT) reviews every report and coordinates further analysis and remediation.

Contact for security reports: psirt@ith.com

Please provide the following information whenever possible:

• affected product or system
• software or firmware version
• description of the vulnerability
• potential impact
• steps to reproduce
• technical evidence or log files

After receiving your report, you will receive an acknowledgment of receipt. We will then assess the information, initiate appropriate mitigation measures if necessary, and keep you informed if we have any follow up questions.

We kindly request that security vulnerabilities are not disclosed publicly until sufficient time has been allowed for analysis and the development of appropriate remediation measures.

This contact address is intended exclusively for reporting security vulnerabilities and security incidents. For general technical inquiries, please use the regular support channels.