Security Center

At Snom, security is an integral part of the design, development, and maintenance of our products and services. We are committed to helping our customers operate secure communication environments through secure product development, timely security updates, transparent vulnerability management, and responsible disclosure practices.

The Snom Security Center provides information about reporting vulnerabilities, product security updates, security advisories, and product support lifecycles.

Whether you are a customer, partner, administrator, or security researcher, this page serves as the central location for security-related information regarding Snom products and services.

Subpages:

Report a Security Vulnerability

If you believe you have identified a security vulnerability affecting a Snom product, service, application, or website, we encourage you to report it responsibly to our Product Security Incident Response Team (PSIRT).

We welcome reports from security researchers, customers, partners, and members of the public and are committed to handling vulnerability reports in a transparent and responsible manner.

Contact our PSIRT

mail_outline security@snom.com

What to include

Please provide:

• Product name and firmware version
• Detailed description of the issue
• Steps required to reproduce the vulnerability
• Potential security impact
• Screenshots, packet captures, log files, or proof-of-concept code (where applicable)
• Contact information for follow-up questions

Reports may also be submitted anonymously.

Product Security Incident Response Team (PSIRT)

The Snom Product Security Incident Response Team (PSIRT) is responsible for coordinating the investigation, assessment, remediation, and disclosure of security vulnerabilities affecting Snom products.

The team works closely with developers, product management, quality assurance, partners, suppliers, and security researchers to ensure that reported vulnerabilities are evaluated and addressed appropriately.

Security Advisories

Snom publishes Security Advisories to inform customers about confirmed vulnerabilities, available security updates, mitigations, and affected products.
 

Our advisories include:

• Vulnerability descriptions
• Severity assessments
• Affected products and firmware versions
• Available fixes and mitigations
• Security update information
• Disclosure history

Product Security Lifecycle

Security updates are provided for supported products throughout their defined security support lifecycle.

Lifecycle information helps customers understand:

• Security support availability
• End-of-Security-Support dates
• Product status information
• Migration recommendations for discontinued products

We encourage customers to regularly review lifecycle information and maintain supported firmware versions.

Security Updates

To protect users against known vulnerabilities and emerging threats, Snom regularly releases security-related firmware and software updates.

Customers should install available security updates as soon as practical and ensure that products are operating on currently supported software versions.