CERT-In to assess vulnerabilities impacting all products designed, developed and manufactured in India

CERT-In has joined with the Common Vulnerabilities and Exposures (CVE) Program to take a step forward in strengthening confidence in “Make in India” and cultivating responsible vulnerability research in the country. In this regard, the CVE Program has recognised the Indian Computer Emergency Response Team (CERT-In) as a CVE Numbering Authority (CNA) for vulnerabilities affecting any products created, produced, and manufactured in India.

The CVE Program’s purpose is to detect, define, and classify publicly disclosed cybersecurity vulnerabilities. It is a global, community-based project that relies on the community to identify vulnerabilities. Organizations from across the world that have worked with the CVE Program detect, assign, and publicise vulnerabilities. CVE Records are published by partners in order to transmit standard descriptions of vulnerabilities.

CVE is an international, community-driven project that relies on the community to identify vulnerabilities. The found vulnerabilities are then assigned and reported to the CVE List. CVE Records are used by information technology and cybersecurity experts to ensure that they are discussing the same issue and to coordinate their efforts to prioritise and resolve vulnerabilities.

A CNA is assigned to each CVE Record added to the list. The CVE Records in the catalogue allow programme stakeholders to quickly find and correlate vulnerability information that may be utilised to defend systems against assaults. Each CNA has a distinct scope of responsibilities for identifying and publicising vulnerabilities.