Request Vulnerability Coordination Assistance

To submit a vulnerability report to Carestream’s Product Security Team, please submit the form below with a brief description of your discovery. Carestream will send a timely response to your submission (typically within five business days).

Independent cybersecurity researchers who discover and submit a vulnerability report to us may choose to receive credit after the submission has been accepted and validated by our product security team.

Contact Information

Name The name of the person submitting this form. You may use a pseudonym, alias, or handle in place of your real name.

Organization If you are reporting on behalf of an organization, list its name here.

Email Address Your personal email address. Consider creating a free webmail account if you do not wish to share your email address.

Telephone The telephone where we may reach you if necessary.

Please DO NOT acknowledge me by name in any published document about this vulnerability. Note: If we publish a document based on this report, we will credit you unless otherwise specified.

Vulnerability Description

What is the name of the affected product or software?

What version number of the product or software is affected? A version number, firmware version, build number, or release date is helpful for identifying affected products.

What is the vulnerability? Describe the vulnerability in sufficient technical detail. Include a proof of concept if possible. You may describe multiple vulnerabilities here rather than submitting multiple forms, if the vulnerabilities affect the same product.

How does an attacker exploit this vulnerability? Explain access or other conditions necessary to attack.

What does an attacker gain by exploiting this vulnerability? (i.e., what is the impact?) Additional privileges, etc. Please be as specific as possible

Please note any specific tools or techniques used.How was the vulnerability discovered?

Yes, there evidence that this vulnerability is being actively exploited?

Yes, I plan to publicly disclose this vulnerability yourself?

We will not share any comments in this field.Private Comments