• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

TP-Link Systems Inc. Receives CVE Numbering Authority Designation

btarunr

Editor & Senior Moderator
Staff member
Joined
Oct 9, 2007
Messages
47,655 (7.43/day)
Location
Dublin, Ireland
System Name RBMK-1000
Processor AMD Ryzen 7 5700G
Motherboard Gigabyte B550 AORUS Elite V2
Cooling DeepCool Gammax L240 V2
Memory 2x 16GB DDR4-3200
Video Card(s) Galax RTX 4070 Ti EX
Storage Samsung 990 1TB
Display(s) BenQ 1440p 60 Hz 27-inch
Case Corsair Carbide 100R
Audio Device(s) ASUS SupremeFX S1220A
Power Supply Cooler Master MWE Gold 650W
Mouse ASUS ROG Strix Impact
Keyboard Gamdias Hermes E2
Software Windows 11 Pro
TP-Link Systems Inc., a global leader in networking and smart home solutions, today announced its official authorization by the Common Vulnerability and Exposures Program (CVE) as a CVE Numbering Authority (CNA). This designation empowers TP-Link to assign CVE IDs to certain vulnerabilities potentially related to its products, furthering its commitment to proactive cybersecurity measures.

The CVE Program is an international, community-driven initiative that identifies, defines, and catalogs publicly disclosed cybersecurity vulnerabilities. CNAs are organizations that are responsible for assigning CVE IDs and publishing detailed information about vulnerabilities, contributing to a more secure digital ecosystem. TP-Link's new role as a CNA enhances its ability to respond swiftly to security threats and ensures greater transparency in vulnerability reporting.



"As cybersecurity threats continue to evolve, TP-Link remains dedicated to strengthening security across our product lines and fostering trust with our customers," said Jeff Barney, President of TP-Link Systems Inc. "Becoming a CVE Numbering Authority underscores our proactive approach to responsible vulnerability disclosure and reaffirms our commitment to working with the security community to safeguard users worldwide."

TP-Link's CNA status builds upon its recent cybersecurity initiatives. The company is a proud signatory of the U.S. Cybersecurity and Infrastructure Security Agency's (CISA) "Secure by Design" pledge and actively participates in CISA's Secure by Design Technical Exchange Group. TP-Link also maintains a vulnerability disclosure program and sponsors a bug bounty program to encourage responsible reporting from security researchers.

Through its active participation in the CVE Program, TP-Link is taking a leadership role in vulnerability management, ensuring that security researchers, partners, and customers benefit from a streamlined and efficient process for identifying and addressing potential threats. This initiative reflects TP-Link's broader mission to enhance transparency, improve product security, and collaborate with the cybersecurity community to build a safer internet for everyone.

View at TechPowerUp Main Site
 
Joined
Mar 7, 2011
Messages
5,023 (0.97/day)
Interesting, generally TP-Link network products sell alongside D-Link in quite large numbers. Would like to see how their own firmware evolves.
 
Top