StageLink™
1.2 1.1
1.2 1.1 English

Risk Context

Intended Purpose

The StageLink devices are intended to send and receive analog and digital audio from its audio Inputs and outputs to dedicated, trusted media networks via SMPTE 2110-30/AES67, send and receive GPIO commands via these networks and act as a USB-Audio interface (except NSA-010C) for PCs and other USB-Audio Class 2.0 compliant devices.
The devices can be integrated and partially controlled via Riedel Bolero and Artist systems or completely standalone configured and controlled via the built-in web interface.


Reasonably Foreseeable Use

In addition to the intended purpose, the manufacturer reasonably foresees that users may:

  • Accessing the devices remotely through VPN connections or corporate networks.

  • Integrate the devices into networks where they get controlled via 3rd party broadcast control systems.

  • Allow multiple systems to receive the audio and control data through the network.

  • Allow multiple users to access the web interface simultaneously.

  • Use 3rd party systems and software to consume and send audio from/to the devices.

  • Deploy the devices in offices, production studios and public live events or similar commercial production environments.

These uses remain consistent with the product's functionality and expected operation.

Foreseeable Misuse

The manufacturer reasonably foresees that some users may use the StageLink devices contrary to the provided instructions or stated limitations, including:

  • Exposing the device’s media and/or management interface directly to the Internet.

  • Operating the device with a weak administrator password or not setting a password at all.

  • Granting administrative access to standard operational users or unauthorized individuals.

  • Disabling or bypassing available security mechanisms.

  • Connecting the device to untrusted or publicly accessible networks.

  • Installing unsupported or modified firmware.

  • Using the device as a security or safety-critical audio messaging device despite manufacturer instructions.

  • Deploying the device in mission-critical environments other than media productions, where continuous operation is essential.

Important: Such use falls outside the intended purpose of the product and may lead to increased cybersecurity risks.


Reporting a Security Vulnerability

Riedel Communications is committed to the security of its products. If you believe you have identified a security vulnerability in this product, please report it to us at https://my.riedel.net/vulnerability. There you'll find guidance on how to submit a report, what details to include so we can investigate promptly, and what to expect from us once a report is received. We ask that you report suspected vulnerabilities in good faith and allow us a reasonable opportunity to assess and address the issue before any public disclosure.

The same page lists known and publicly disclosed vulnerabilities affecting Riedel products, along with available guidance, workarounds, and security updates. We recommend checking this page periodically and subscribing to any available notifications to stay informed of security issues relevant to your equipment.