CYBER RESILIENCE ACT - NOTIFICATION (72 HOURS)
Regulation (EU) 2024/2847, Article 14(2)(b) and 14(4)(b)
CheckOps template - https://checkops.eu/en/cyber-resilience-act/signalement-24h
Send within 72 hours of becoming aware of the exploitation or the incident,
following up the early warning (quote its reference).

Early warning reference:
[ ] A. Actively exploited vulnerability
[ ] B. Severe incident having an impact on the security of the product

1. GENERAL INFORMATION ABOUT THE PRODUCT
Name, function, type (software, hardware, firmware):
Affected versions / unaffected versions:
Approximate number of users or installations:

2. NATURE OF THE VULNERABILITY OR INCIDENT
Case A - general nature of the vulnerability (CWE if known) and of the exploit:
Case B - nature of the incident and initial assessment (severity, impact):
CVSS score or estimated severity:
Component involved (package, version), from the SBOM:

3. CORRECTIVE OR MITIGATING MEASURES
Already taken by the manufacturer:
To be applied by users (workaround, configuration, update):
Fix planned on:

4. USER INFORMATION
Users informed on / by which means (security advisory, email, VEX, CSAF):

5. SENSITIVITY OF THE INFORMATION
[ ] May be shared   [ ] Restricted   [ ] Confidential
Details: