If you suspect that you have discovered a security vulnerability in a supported Crestron product, please let us know by filling out the form below. The Crestron Security Team will respond to and investigate your report.
However, before you report a vulnerability, please review the following information.
Is this problem a vulnerability or a technical support inquiry?
A vulnerability is generally defined as a flaw which would allow a bad actor to gain access to information or capabilities which they would otherwise not be authorized. Many security features of Crestron products require configuration both on the Crestron device and potentially of network services.
To ensure that your product is properly configured please see the guides on the
Resources & Documentation tab above.
If you need assistance to configure and use security features, please contact us via the
Crestron Support Center. The Crestron Security Team cannot provide technical support.
How will Crestron handle my report?
Crestron does not disclose, discuss, or confirm security issues until we have completed our investigation and any necessary updates are generally available.
Crestron uses the Security Advisory page to publish information about security fixes in our products. You may use the form at the bottom of this page to register for updates.
Please ensure that the following information is included.
- The specific product and software/firmware versions which you believe are affected.
- A description of the observed and expected behavior.
- Any information about how the product and environment are configured.
- A list of steps necessary to reproduce the issue.
- If you are reporting a concern regarding the results of an automated scan, please
include the original scan results.
You will receive an automated response when your report as been received. Please respond to this email if any further correspondence on the issue is required.