Support Center
What is the Cyber Resilience Act?
The European Union Cyber Resilience Act (CRA) entered into force on December 10, 2024, establishing mandatory cybersecurity requirements for products with digital elements sold within the European Union. The legislation aims to improve cybersecurity throughout a product’s lifecycle by requiring manufacturers to design, develop, and maintain products with security as a core consideration.
The CRA will become fully applicable on December 11, 2027, with several requirements taking effect earlier, including manufacturer security incident reporting obligations beginning on September 11, 2026.
As GigE Vision cameras are products with digital elements that communicate over Ethernet networks, they fall within the scope of the CRA.
LUCID’s Commitment to CRA Compliance
LUCID Vision Labs is a member of the European Machine Vision Association (EMVA), which administers the GenICam standard. All of LUCID’s GigE Vision cameras conform to the GenICam standard.
LUCID Vision Labs is actively preparing for the implementation of the Cyber Resilience Act and is integrating cybersecurity considerations into both our hardware and software development processes.
As GigE machine vision cameras fall within the CRA’s default product category, third-party certification is not required. LUCID will comply with the applicable cybersecurity requirements through the Module A internal conformity-assessment procedure by December 11, 2027.
GigE Vision Cameras
LUCID is working closely with the EMVA as cybersecurity enhancements to the GigE Vision standard are developed. LUCID plans to evaluate these extensions as they become available and incorporate them where applicable into future firmware releases for supported products to help customers meet evolving cybersecurity requirements.
Arena SDK
For Arena SDK, LUCID is implementing cybersecurity practices aligned with the principles of the CRA, including:
- Secure software development practices
- Vulnerability management and coordinated vulnerability disclosure
- Security advisories for identified vulnerabilities
- Software Bill of Materials (SBOM) availability for supported software releases
These initiatives are intended to provide customers with greater transparency and support the ongoing security of LUCID software products.
Security Vulnerability Reporting
LUCID encourages customers and security researchers to responsibly disclose potential security vulnerabilities.
If you believe you have identified a security vulnerability in Arena SDK or another LUCID software product, please report it to:
Upon receiving a vulnerability report, LUCID will acknowledge receipt within one business day and begin evaluating the reported issue in accordance with our vulnerability handling process.
Customers can also visit our Security Advisories page for the latest information on known exploited vulnerabilities, severe incidents, and security updates.
