Security

Report a Security Issue

At ChamSys, keeping our lighting control products safe and reliable is something we take seriously. This includes proactive prevention as well as the identification and handling of security vulnerabilities and incidents, in line with the EU Cyber Resilience Act (Regulation (EU) 2024/2847). If you’ve found a security vulnerability in any MagicQ, QuickQ, GeNetix, or MediaMaster software or hardware product, we want to hear about it, and we’re grateful you’ve taken the time to tell us.

What should be reported:

• Unauthorised control of a device, including takeover via crafted network packets
• Unencrypted or weakly encrypted communication, including authentication or encryption bypasses
• Vulnerabilities allowing execution of arbitrary code, including remote code execution
• Vulnerabilities allowing leakage of sensitive data
• Insecure update mechanisms that could allow unauthorised or malicious firmware/software updates
• Memory corruption or denial of service via crafted packets

What should not be reported:

• Physical access attacks
• General best-practice suggestions with no demonstrated attack path

How to report

Email us at [email protected] with as much detail as you can share. To help us investigate quickly, please include:

• Product name and, where applicable, serial number and software/firmware version
• A description of the issue, including its potential impact and how it can be triggered
• Steps to reproduce it
• How we can reach you for follow-up questions

Please don’t disclose, publish, or share details of the issue elsewhere until it has been resolved.

What happens next

We review all reports and assess the associated risk. Where required under the Cyber Resilience Act, we escalate actively exploited vulnerabilities or severe incidents to the relevant authorities, including ENISA, within the timelines the regulation sets out. We’ll acknowledge your report and keep you updated as we investigate and work on a fix.

Thank you for helping us keep ChamSys products secure.