Report a security vulnerability

We take the security of our products seriously. If you believe you have found a security vulnerability in one of our products, please tell us so we can investigate and fix it.

What should be reported

• Unauthorized control of a device, including takeover via crafted network packets
• Vulnerabilities allowing execution of arbitrary code, including remote code execution
• Vulnerabilities allowing leakage of sensitive data
• Insecure update mechanisms that could allow unauthorized or malicious firmware/software updates
• Memory corruption or denial of service via crafted packets

What should not be reported

• Physical access attacks
• General best-practice suggestions with no demonstrated attack path

For anything that is not a security issue, including product faults and general questions, please contact ProductSecurity@chauvetlighting.com.

How to report

Email ProductSecurity@chauvetlighting.com. Please include:

• Product name and, where applicable, serial number and software or firmware version
• A description of the issue, including its potential impact and how it can be triggered
• Steps to reproduce it
• How we can reach you for follow-up questions

Please keep the details confidential until we have addressed the issue.

What happens next

We will investigate your report and update you when we complete our investigation. Where a vulnerability is being actively exploited, or a security incident affects one of our products, we notify the EU authorities as the Cyber Resilience Act requires, and we advise affected users what they can do to protect themselves.