The safety and comfort of our customers is our top priority. If you discover a security vulnerability in our product, please report it – this will help us protect our customers.

The coordinated CVD (Coordinated Vulnerability Disclosure) reporting process for security vulnerabilities (vulnerability management), in which discoverers confidentially report a discovered IT security vulnerability to the manufacturer, is part of the CRA (Cyber Resistance Act) system.

This guide explains how to proceed and what you can expect.

The security vulnerability report affects the following products:

• MQMe Quantometer with electronic meter index
• MEC 500 Electronic Volume Converter

If you discover a security vulnerability, please report it by sending an email to the following address: 
sales(at)metreg-technologies.de

What should your report contain?

• Product and version,
• Description of the vulnerability – what it is about,
• Circumstances of its discovery – how or what caused it?
• What were the consequences of the vulnerability?
• Your contact details and declaration whether you wish to remain anonymous during the further processing of your application.

What steps do we take after receiving a report of security vulnerability?

• We will review your application and stay in contact regarding the next steps.
• We will take corrective action to close the security gap.
• We will provide the advertiser with feedback and instructions on how to eliminate the threat.