Product Security

Vulnerability Disclosure Policy

1. Introduction

We are committed to ensuring the security of our products and the safety of our users. This vulnerability disclosure policy applies to any vulnerabilities you are considering reporting to us. We recommend reading this policy in its entirety before reporting a vulnerability and always acting in compliance with it. We value those who take the time and effort to report security vulnerabilities according to this policy.

Note: We do not offer monetary rewards for vulnerability disclosures at this time.

2. How to Report

If you believe you have found a security vulnerability in a PHILIPS product or service managed by TPV-TECH, please submit your report to:

Email: [email protected]

In your report, please include:

Model Number: The device model and firmware version where the vulnerability was observed.

Title of Vulnerability: A brief, descriptive title.

Description: A detailed summary, including supporting files (screenshots/logs) and possible mitigations.

Impact: What could an attacker potentially do?

Steps to Reproduce: Provide a benign, non-destructive proof of concept.

3.  What to Expect

After submitting your report, we will:

1.     Acknowledge receipt of your report within 7 calendar days.

2.     Triage and categorize your report within 15 working days.

3.      Update you on our progress, including remediation status and disclosure plans.

4.  Guidelines

To remain in compliance with this policy, you must NOT:

·       Break any applicablelaws or regulations.

·       Access unnecessary, excessive, or sensitive data.

·       Modify or delete data in the organization’s systems or services.

·       Use high-intensity invasive or destructive scanning tools.

·       Attempt any form of Denial of Service (DoS/DDoS).

5. Coordinated Disclosure

We kindly ask that you do not disclose vulnerability details to the public or any third party until we have resolved the issue and notified affected users. We are happy to coordinate a public release with you once the remediation is complete.

6. Security Update Policy

The product safety update support period of our company is until 2030/8(7039 series)、 2032/8(9020 series)

Last Updated: April 2026