Reporting security vulnerabilities

HCS Hydraulic Control Systems GmbH takes the security of its products seriously. If you believe you have found a security vulnerability in one of our products – in particular the DMA-22(A), DAC-4x(A) and DAP-22 units, their firmware, or the HCSTool configuration software – please contact:

security@h-c-s-gmbh.de

Please include the affected product and type designation, the firmware version (shown in HCSTool), the interface used, a description with steps to reproduce, and how we can reach you.

What to expect

• We acknowledge receipt within 2 business days.
• We assess the report and keep you informed.
• We fix confirmed vulnerabilities and inform affected customers directly.
• Actively exploited vulnerabilities are reported to the competent authorities as required by the EU Cyber Resilience Act (Regulation (EU) 2024/2847).
• Please do not disclose details publicly before a fix is available or we have agreed on a date.

Please do not send confidential customer data. For general technical questions, please use our contact page.