ARGOX PSIRT

What Is the EU Cyber Resilience Act?

The EU Cyber Resilience Act, or CRA, establishes cybersecurity requirements for products with digital elements. It requires manufacturers to address cybersecurity throughout the entire product lifecycle, from product planning and design to development, production, maintenance, vulnerability handling, and end-of-support management.
The CRA introduces mandatory cybersecurity obligations for manufacturers, importers, and distributors. These requirements apply across the value chain and are intended to ensure that products placed on the European Union market are designed and maintained with an appropriate level of cybersecurity.
Manufacturers are required to assess cybersecurity risks, implement appropriate security controls, provide security updates, manage vulnerabilities, maintain technical documentation, and report certain actively exploited vulnerabilities and severe cybersecurity incidents within the required timeframes.

Argox Approach to the Cyber Resilience Act
Cybersecurity is becoming an essential part of connected printing and automatic identification solutions. At Argox, we are working to integrate cybersecurity considerations into product planning, development, release, maintenance, and vulnerability-management processes.
Argox is evaluating the impact of the EU Cyber Resilience Act on our products, internal processes, suppliers, and supporting documentation. Our compliance preparation includes the following key areas:
•    Cybersecurity risk assessment during product development
•    Secure product design and development practices
•    Software Bill of Materials, or SBOM, management
•    Vulnerability monitoring, evaluation, and remediation
•    Security-update and product-support planning
•    Cybersecurity incident and vulnerability-reporting procedures
•    Technical documentation and conformity-assessment preparation
•    Cybersecurity requirements for relevant suppliers and third-party components

Argox will continue strengthening its cybersecurity governance and product lifecycle processes to support compliance with the CRA as its obligations become applicable.

Reported Vulnerabilities
Reported vulnerabilities and their corresponding CVE patches or workaround solutions will be displayed below. For any questions, please contact us directly.
 
Case ID# Description Impacted Products CVE ID# Severity Version Published Last Updated
               

For more information about Argox product security and vulnerability reporting, please visit:
This website stores cookies on your computer. These cookies are used to collect information about how you interact with our website and allow us to remember you. We use this information in order to improve and customize your browsing experience and for analytics and metrics about our visitors both on this website and other media. To find out more about the cookies we use, see our Privacy Policy.
If you decline, your information won’t be tracked when you visit this website. A single cookie will be used in your browser to remember your preference not to be tracked.
Login
Language
Search