Vulnerability Disclosure Policy

Vulnerability Reporting and Response Process：

At SELEA, cybersecurity is a top priority for all our products and solutions. We are committed to ensuring that every reported issue is addressed in a timely manner by a dedicated specialist, who will analyze, follow up and provide timely feedback.

SELEA fully supports responsible vulnerability reporting and appreciates the work of white hat researchers, who are encouraged to report any security vulnerability to us. In line with best practices, we require vulnerability reporters to keep the vulnerability confidential until Hikvision officially releases the security advisory.

Our approach ensures transparency, security, and collaboration in maintaining the integrity of our systems.

HSRC uses CVSSv3.1 to give the Base Score, Temporal Score and attack vector of each vulnerability in the security advisory. For the CVSSv3.1 standard, please refer to:

HSRC uses CVE (Common Vulnerability and Exposures) to quote the vulnerabilities outside of SELEA vulnerability disclosure websites.