Vivitek-Product Security

Product Security Policy

We do our best to provide continuous security updates for all Vivitek products, covering the product lines of Projectors, NovoConnect, NovoDS, NovoTouch and NovoDisplay. The security updates generally include the latest security patches, security vulnerability fixes, and security improvements. Typically, we will maintain the security updates for at least 2 years after the first shipment. We regularly publish and update the end-of-life (EOL) products to help you check whether your device can receive security updates.

Reporting Steps, Rewards and Recognition
Please send your reports to security@vivitek.com with all information you have. In our Coordinated Vulnerability Disclosure policy we describe in detail how we prefer issues or security vulnerabilities to be reported. The policy also outlines how the process of handling your report works, what rewards we extend to external researchers that help our overall security and we have acknowledgements for finding critical issues.

Privacy Statement

This privacy policy covers the use of the hardware devices “Projector” “NovoTouch”, “NovoDisplay”, “NovoConnct” and “NovoDS” and software "NovoConnect App", "NovoPresenter",and "NovoDS Mobile" applications only. Mobile Apps for NovoConnect and NovoDS products do not collect any statistics, personal information, or analytics from our users.

The mobile Apps do request explicitly to users for authentication credentials for Google Drive, Google Calendar, and Facebook, which are solely for users to access the content from the corresponding services.
Camera access in NovoDS, NovoPresenter and NovoConnect App is for QR code scanning only.

Security Vulnerabilities and Update Assurance

Vivitek products are regularly provided with automatic OTA (Over-the-air) updates that improve the software on the device. These updates may, but will not always include:

Updates of applications or of the operating system
Security updates
Firmware updates for the device

Once an OTA update is available for your device, you will receive a notification if automatic updates are enabled.

Projector

Model

Release Date

EOL Date

Q9

May 31, 2024

Dec 31, 2027

DU775Z-UST

May 31, 2024

Dec 31, 2027

DU4871Z

May 31, 2024

Dec 31, 2027

DU4771Z

May 31, 2024

Dec 31, 2027

DU4381Z-ST

May 31, 2024

Dec 31, 2027

DU4371Z-ST

May 31, 2024

Dec 31, 2027

DK10000Z

May 31, 2024

Dec 31, 2027

DK8500Z

May 31, 2024

Dec 31, 2027

DU7299Z

May 31, 2024

Dec 31, 2027

DU7199Z

May 31, 2024

Dec 31, 2027

Flat Panel Display

Model

Release Date

EOL Date

OS Version-Future

OS Version-Shipped

Update Frequency

NovoTouch

EK865i

May 31, 2024

Dec 31, 2027

BK862i

May 31, 2024

Dec 31, 2027

BK860i

May 31, 2024

Dec 31, 2027

NovoDisplay

DK863

May 31, 2024

Dec 31, 2027

DK553

May 31, 2024

Dec 31, 2027

Products Security Handling Procedure

Upon receiving your report regarding security vulnerabilities or issues, our professional team initiates the following processing procedure:

Preliminary Assessment: Our team of security experts will conduct preliminary assessment of the report to determine its validity and severity.
Issue Investigation: If the report is confirmed as valid, we conduct an in-depth investigation to understand the specific causes and scope of the problem.
Solution Development: Based on the investigation results, our engineering team develops appropriate solutions, such as software updates or security patches to address identified vulnerabilities.
Testing and Verification: Before implementing any corrective measures, we conduct rigorous testing to ensure the effectiveness of the solution and prevent the introduction of new issues.
Implementation and Notification: Once the solution is ready, we implement it through the appropriate channels and notify relevant users with detailed information about the updates.

Legal Disclaim

The information on this page is for reference only, and the actual situation is subject to the security update received by your device.
The delivery time of security patches may vary depending on the regions and models.
Some patches received from chipset vendors (also called device-specific patches) may not be included in the security update of this month. We will include them in the security update as soon.
The security updates policies and devices are subject to change and will be reviewed on a regular basis.

Contact Us

Please tell us your findings via an email security@Vivitek.com or fill in the table below with a detailed description.

Vulnerability Name

Vulnerability Type

Vulnerability Level

Vulnerability Detail