@@ -1396,13 +1396,13 @@ If the product provides a method to transfer data and settings to another produc
See Section 5.3 for which mitigations are necessary for which security profiles and Annex C.4 for the rationale.
### 5.2.18 **TR-VULH**:
### 5.2.18 **TR-VULH**: Vulnerability handling
#### 5.2.18.1 Requirement
The product shall have vulnerability handling processes compliant with <aref="_ref_3">[3] prEN 40000-1-3: "Cybersecurity requirements for products with digital elements – Vulnerability Handling".
#### 5.2.18.2 **MI-VULH**:
#### 5.2.18.2 **MI-VULH**: Vulnerability handling
The product shall have vulnerability handling processes compliant with <aref="_ref_3">[3] prEN 40000-1-3: "Cybersecurity requirements for products with digital elements – Vulnerability Handling".