Speed Post News Network

New Delhi : Indian Computer Emergency Response Team (CERT-In) has been authorised by the Common Vulnerabilities and Exposures (CVE) Programme, as a CVE Numbering Authority (CNA) for vulnerabilities impacting all products designed, developed, and manufactured in India.

Indian Computer Emergency Response Team ( CERT-In) has been undertaking responsible vulnerability disclosure and coordination for vulnerabilities reported to CERT-In in accordance to its vulnerability coordination role as a National CERT since its inception. To move a step further in the direction to strengthen trust in “Make in India” as well as to nurture responsible vulnerability research in the country, CERT-In has partnered with the Common Vulnerabilities and Exposures (CVE) Programme, according to a PIB release.

CVE is an international community-based effort and relies on the community to discover vulnerabilities. The vulnerabilities are discovered, then assigned and published to the CVE List.  Information technology and cybersecurity professionals use CVE Records to ensure they are discussing the same issue, and to coordinate their efforts to prioritise and address the vulnerabilities.

The mission of the CVE Programme is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.The vulnerabilities are discovered, then assigned, and published by organizations from around the world that have partnered with the CVE Programme. Partners publish CVE Records to communicate consistent descriptions of vulnerabilities.

CNAs are organizations responsible for the regular assignment of CVE IDs to vulnerabilities, and for creating and publishing information about the Vulnerability in the associated CVE Record. The CVE List is built by CVE Numbering Authorities (CNAs). Every CVE Record added to the list is assigned by a CNA. The CVE Records published in the catalog enable programme stakeholders to rapidly discover and correlate vulnerability information used to protect systems against attacks. Each CNA has a specific Scope of responsibility for vulnerability identification and publishing, according to a PIB release. To disclose vulnerability to CERT-In or to learn more about responsible disclosure process, visit CERT-In website @ https://www.cert-in.org.in/RVDCP.jsp .