Product Security Incident Response Team

Banner is dedicated to safeguarding operations by maintaining the highest levels of cybersecurity for Banner products and services. Our Product Security Incident Response Team (PSIRT) monitors, investigates, and tracks reports of potential vulnerabilities, developing and releasing solutions as soon as possible. If necessary, a security advisory may be released before a solution is ready, one that provides steps to take in the meantime. 

Anyone is invited to report a potential vulnerability or other possible security incident regardless of customer status. Security researchers, higher education institutions, government organizations, industry groups, vendors, and other members of the security community are encouraged to submit a report if they discover a possible vulnerability.

Reporting vulnerabilities allows us to fix these issues and inform customers about the necessary fixes. This makes our products more secure and helps protect our customers by managing security risks. 

Report a vulnerability: PSIRT@bannerengineering.com

• Contact information: name, email, phone number, country, and organization name (all are required to process a report)
  
• Affected product including model, firmware version, or software version
• Common Vulnerability Scoring System (CVSS) score (if known)
• How and when the vulnerability was discovered
• Technical description of vulnerability, including any known exploits and existing Common Vulnerability and Exposure IDs

For security, please use Banner’s public key for encryption when submitting a vulnerability report.

Fingerprint: 552E 9FFD A9D9 BEB3 0568 ABB8 DB8A 157E 5D25 A077

When security advisories are published, solutions and related information will be found here.