Product security

Report a Security Vulnerability

Report a cybersecurity vulnerability or incident affecting MCZ Group products: pellet stoves, HVAC systems and their firmware, apps, connectivity modules and digital services.

MCZ collects this report for technical assessment. This form does not submit notifications to ENISA’s Single Reporting Platform: any reporting obligations towards the authorities are the manufacturer’s responsibility.

Submit a report

Fields marked * are required. You may omit your name and email; without contact details we cannot ask you for clarification. Provide only necessary information: no passwords, tokens, third-party personal data or complete logs. If confidential evidence is available, say so and leave contact details to arrange its transfer.

Report type *

Product family *

Brand and model (or “unknown”) *

Affected component (control board, Wi-Fi, app, cloud, remote control...)

Firmware / software / app version

Affected connection or interface

When was it observed? Include date, time and time zone if known

Countries where affected products have been observed

Description of the issue *

Steps to reproduce / available evidence (no confidential data)

Observed or potential impact on data, functions, availability and personal safety

Is any malicious exploitation of the vulnerability known? *

If this is an incident: do you suspect it was caused by unlawful or malicious acts? *

Evidence of exploitation / indicators and extent of the issue

Measures already taken or possible solutions

Public references (CVE, advisory, URL) and any previous disclosure

Name / organisation (optional)

Email for follow-up (optional)

I have read the privacy notice. *

Submit a report

RESERVED AREA