一、Vulnerability Submission

Vulnerability reporters should send an email to SECURITY@csvision.cn to report the security vulnerabilities they have discovered.

二、Vulnerability Review Phase

1) Within two working days, staff from the CSVision Security Emergency Response Center will confirm receipt of the vulnerability report and begin to assess the issue.

2) Within five working days, Zhongshengyihua staff will handle the issue and provide a conclusion. If necessary, they will communicate with the reporter to confirm and request assistance from the reporter.

三、 Vulnerability Repair Completion Stage

The business department repairs vulnerabilities, with the repair time determined by the severity of the issue and the difficulty of the repair. Severe and high-risk vulnerabilities should be repaired within 24 hours, medium-risk vulnerabilities within three working days, and low-risk vulnerabilities within seven working days. Some vulnerabilities are subject to version release restrictions, and the repair time is determined based on the actual situation. Vulnerabilities with severe or major impact will be issued with separate emergency security announcements.