WIZnet designs hardwired TCP/IP chips, network modules, and the software that supports them. If you believe you have found a security vulnerability in a WIZnet product or service, please report it to us as described below.

Reporting a vulnerability

Email security@wiznet.io. Our contact details are also published in a machine-readable format at /.well-known/security.txt.

To help us handle your report quickly, please include:

• The affected product (chip, module, or board) or service, including the version or revision you tested
• The firmware, library, or software versions involved
• A step-by-step explanation of how to reproduce the issue
• The security impact, with any proof-of-concept code or logs that demonstrate it

What to expect

• We will acknowledge your report and investigate it.
• We will let you know the outcome of our assessment, and keep you informed while we work on a fix.
• We ask that you keep the issue confidential until a fix is available. Where public disclosure is appropriate, we will coordinate its timing with you.
• With your permission, we will credit you for the finding.

Scope

This process covers WIZnet silicon and modules, the official firmware, drivers, libraries, and example code we publish, and the wiznet.io website and its subdomains. Products and services operated by our distributors and partners are out of scope.

Terms

• We do not operate a bug bounty program. Reports are made on a voluntary basis and do not create any entitlement to a reward, compensation, or any other obligation on the part of WIZnet.
• Please research and report in good faith: do not access or modify data that is not yours, and do not degrade or disrupt our products or services.
• We will not initiate or support legal action against researchers who act in good faith and comply with this policy.
• This page describes how to report vulnerabilities to WIZnet. It does not constitute a warranty of any kind.