Chint Power has established a complete vulnerability response process, including acceptance, assessment, remediation, disclosure, and improvement.

PSIRT will promptly receive and handle Security issues reported by relevant parties, continuously and proactively collect threat intelligence discovered in the industry, screen effective vulnerability information, improve the product security system, and minimize security risks to the greatest extent.

PSIRT will systematically analyze and validate security vulnerabilities, and organize relevant security experts to classify and score them according to the CVSS (Common Vulnerability Scoring System) standard.

After a security vulnerability is confirmed and the affected products are identified, PSIRT will work with the product team to provide a complete solution and implementation plan.

l Chint Power will formally announce vulnerabilities on the official website, communicate with affected customers, and assist customers in repairing the vulnerabilities as early as possible to protect customer data security and system stability.

Through handling a security vulnerability, Chint Power will summarize and improve from both management and technical perspectives to solve a class of security issues, thereby improving the efficiency and quality of vulnerability handling and providing customers with secure and reliable products and services.

Chint Power discloses vulnerabilities and remediation solutions through official website channels. Security vulnerability advisories contain detailed information such as vulnerability severity, affected products and versions, mitigation and remediation measures. They are typically used to disclose information and remediation solutions for Chint Power product security vulnerabilities of medium and high severity, enabling customers to obtain detailed vulnerability information and assess risks. Chint Power reserves the right to publish and update security advisories.

During the vulnerability handling process, Chint Power PSIRT strictly controls the scope of vulnerability information, which is only shared among personnel related to the vulnerability handling.

Chint Power PSIRT reserves the right of final interpretation of the above policies.