PRODUCT SECURITY INCIDENT RESPONSE TEAM
Product Safety
The security of our products is a top priority for B&B Verpackungstechnik GmbH. On this page, we provide information about the Cyber Resilience Act (CRA) and our Product Security Incident Response Team (PSIRT). We also explain how you can report vulnerabilities and how we handle your data.
The Cyber Resilience Act is EU Regulation 2024/2847 on cybersecurity requirements for products with digital elements. It requires manufacturers to design their products to be secure throughout their entire lifecycle and to address vulnerabilities.
Effective September 11, 2026, reporting requirements apply to actively exploited vulnerabilities and serious security incidents. The regulation will be fully enforceable as of December 11, 2027. This also applies to our machines with digital elements.
PSIRT
The PSIRT is the Product Security Incident Response Team at B&B Verpackungstechnik GmbH. It serves as our central point of contact for security issues related to our products. The PSIRT receives vulnerability reports, evaluates them, and coordinates their resolution. We inform affected customers about security advisories and available updates.
Report a Vulnerability
Have you discovered a security vulnerability in one of our products? Please report it directly to our PSIRT: psirt@bub-group.com
Please include the affected product and version, a description of the vulnerability and, if possible, the steps to reproduce it. We will confirm receipt of your report and keep you informed about the status of its processing.
Confidential and Responsible Processing
All incoming reports are treated as strictly confidential. Access to the submitted information is restricted to authorized PSIRT personnel only. The identity of the reporting person is treated confidentially and will only be disclosed with their express consent.
We review every report carefully. If necessary, we will contact you to clarify further details. We then initiate targeted measures to protect the affected systems.