WeatherXM takes the security of its hardware, firmware, and web applications seriously.

If you discover a security vulnerability in the WG1200 Web Flasher, firmware packages, or related services, please report it responsibly:

• Email: security@weatherxm.com
• PGP Key: Available on request or via the WeatherXM website.

Please include:

1. Detailed description of the vulnerability and attack vector.
2. Steps to reproduce or proof-of-concept code.
3. Affected versions/commits.
4. Any potential impact on device security (e.g. partition overwrite, credential exposure, bootloader bypass).

We ask that you do not publicly disclose the vulnerability until we have had an opportunity to review, address, and verify a fix. We will acknowledge your report promptly and provide regular updates on remediation.