STAGE™
2.1 2.0 1.0
STAGE™
2.1 2.0 1.0 English
Breadcrumbs

Risk Context

Intended Purpose

  • Provide a common user interface to configure, operate and monitor Riedel Products.

  • Provide centralized capabilities (i.e. user management, license management, telemetry, northbound APIs) on behalf of Riedel Products.

  • Act as a middleware to enable integration of Riedel Products with 3rd party systems.

  • Provide a shared environment where multiple people use STAGE at the same time to perform various operational tasks related to managed Riedel products.

Operational Environment

STAGE is expected to operate:

  • Indoors within controlled professional environments.

  • On managed wired Ethernet networks.

  • Within secured corporate, production, or broadcast infrastructures.

  • In installations where physical access is limited to authorized personnel.

Intended Target Users

  • System Administrators

  • Technical Administrators

  • Audio/Video Engineers

  • Audio/Video Operators

Usage Scenarios

STAGE is designed as a multi-user environment and therefore supports multiple simultaneous users with various access levels and permissions.

Expected Duration of Use

STAGE is designed for continuous long-term operation and is expected to remain operational throughout the supported product lifecycle, including software maintenance and security updates.


Reasonably Foreseeable Use

Reasonably foreseeable use includes:

  • Centralized Management of Distributed Riedel Systems: customers may use STAGE to discover, register, configure, and monitor Riedel products deployed across multiple facilities, venues, studios, or production sites.

  • Remote Administration and Operations customers may provide remote access to STAGE for administrators, operators, engineers, system integrators, and support teams (ex. through VPN, corporate network).

  • Integration with multiple vendors: customers may use STAGE as the integration point between Riedel products and 3rd party broadcast control systems, monitoring systems, identity providers (e.g. okta) and/or enterprise user database (e.g. Active Directory).

  • Automation and Orchestration: customers may use northbound APIs to automate provisioning of Riedel products.

  • Collection and export of telemetry data: customers use STAGE as a centralized repository for operational logs and telemetry that are exported to enterprise monitoring platforms (ex. Grafana, Splunk).

  • Remote Administration and Operations customers may provide remote access to STAGE for administrators, operators, engineers, system integrators, and support teams (ex. through VPN, corporate network).


Foreseeable Misuse 

The manufacturer reasonably foresees that some users may use the STAGE contrary to the provided instructions or stated limitations, including:

  • Deployment on untrusted network: Deploying STAGE on an untrusted network without adequate network security controls.

  • Use of Shared User Accounts: Multiple individuals utilize the same user account, reducing accountability and traceability of actions.

  • Assignment of Excessive Permissions: Users are granted permissions beyond those required to perform their responsibilities.

  • Overly Broad Access to Monitoring Data: Administrators granting monitoring information access to a broader set of external systems than intended.

  • Use of Shared API Credentials: Multiple external systems using the same northbound API client account, making it difficult to attribute actions to a specific system or integration.

Important: Such use falls outside the intended purpose of the product and may lead to increased cybersecurity risks.


Reporting a Security Vulnerability

Riedel Communications is committed to the security of its products. If you believe you have identified a security vulnerability in this product, please report it to us at https://my.riedel.net/vulnerability. There you'll find guidance on how to submit a report, what details to include so we can investigate promptly, and what to expect from us once a report is received. We ask that you report suspected vulnerabilities in good faith and allow us a reasonable opportunity to assess and address the issue before any public disclosure.

The same page lists known and publicly disclosed vulnerabilities affecting Riedel products, along with available guidance, workarounds, and security updates. We recommend checking this page periodically and subscribing to any available notifications to stay informed of security issues relevant to your equipment.