Support

Our Commitment

We are committed to maintaining the security of products developed and manufactured for our brand customers throughout the product lifecycle.

As an OEM/ODM supplier, we work closely with our brand customers and technology partners to identify, investigate, remediate, and verify security vulnerabilities affecting our products and related components.

Security Vulnerability Reporting

Security researchers, brand customers, technology partners, and other stakeholders who identify a potential security vulnerability related to products developed or manufactured by us are encouraged to contact our Product Security Team.

Information to Include in a Vulnerability Report

To help us assess and investigate reported security vulnerabilities, please provide the following information:

1. Reporter Contact Information (Required): Name or alias and an email address for follow-up communication.
2. Affected Product (Required): Product name, model number, and affected firmware or software version.
3. Vulnerability Description (Required): A clear description of the suspected vulnerability and its potential security impact.
4. Steps to Reproduce: Step-by-step instructions on how to reproduce the issue.
5. Supporting Evidence: Proof of Concept (PoC), screenshots, logs, or other relevant technical evidence, if available.
6. Affected Components: The suspected affected components or interfaces, if known.
7. Suggested Remediation: Suggested remediation or risk mitigation measures, if available.

Please do not include passwords, personal data, or other unnecessary sensitive information in your report.

Vulnerability Handling and Communication

Upon receiving a security vulnerability report, we will take appropriate actions based on the nature, severity, and potential impact of the vulnerability.

1. Acknowledgment of Receipt: We will acknowledge receipt of the vulnerability report by email within three business days and notify the relevant brand customer to facilitate the registration and tracking of the vulnerability report.
2. Initial Technical Assessment: We will review the submitted information and assess the nature and potential impact of the suspected vulnerability.
3. Identification of Affected Products and Components: We will identify the potentially affected products, models, firmware, software, or related components.
4. Coordination with Internal Engineering Teams: Where necessary, we will work with relevant engineering teams to investigate the vulnerability and conduct technical analysis.
5. Coordination with Brand Customers: Depending on the nature of the vulnerability, we will communicate and coordinate with the relevant brand customers as necessary.
6. Coordination with Third-Party Technology Providers: If the vulnerability involves third-party components or services, we will coordinate with the relevant providers, as appropriate, to support investigation and remediation.
7. Remediation or Risk Mitigation: Based on the vulnerability assessment, we will develop and validate appropriate remediation or risk mitigation measures.
8. Provision of Technical Information: We will provide relevant brand customers with the necessary technical information to support security updates, customer notifications, and applicable regulatory actions.
9. Notification of Resolution: Once appropriate remediation or risk mitigation measures have been implemented or made available, we will, as appropriate, provide the reporter with relevant information regarding the outcome of the handling process or subsequent updates by email, subject to applicable confidentiality requirements and coordinated vulnerability disclosure practices.

Coordinated Vulnerability Disclosure

We support coordinated vulnerability disclosure practices and work with relevant stakeholders to investigate reported vulnerabilities and develop appropriate remediation measures before disclosure, where appropriate.

Third-Party Components and Services

Where a vulnerability involves third-party components, software, SDKs, cloud services, or other technologies, we will coordinate with the relevant technology provider to support investigation and remediation.

Consumer Support

For product warranty, after-sales service, general technical support, or other consumer-related inquiries, please contact the brand or product provider identified in the applicable product documentation.