默认类别产品
不属于重要产品或关键产品清单的含数字元素产品，按默认类别履行基础义务。
类别解释
Products in the default category
大部分含数字元素的产品并不在附件三、附件四的清单之内，而是按默认类别管理。此类产品同样需要满足附件一的基本网络安全要求与漏洞处理要求，但合格评定由制造商自行完成。判定时应先比对附件三、附件四的技术描述，确认产品的核心功能是否落入重要产品或关键产品类别。
English
Most products with digital elements fall outside Annexes III and IV and are handled under the default category. They still have to meet the essential cybersecurity requirements and the vulnerability handling requirements of Annex I, but the conformity assessment is carried out by the manufacturer. Always compare the product's core functionality with the technical descriptions in Annexes III and IV first.
未列入 CRA 附件三、附件四清单的含数字元素产品
Products with digital elements not listed in Annex III or Annex IV to the CRA
由制造商自行完成风险评估与内部合格评定（模块 A），编制技术文档、出具欧盟符合性声明并加贴 CE 标识。
The manufacturer carries out the risk assessment and internal conformity assessment (Module A), draws up the technical documentation, signs the EU declaration of conformity and affixes the CE marking.
默认类别的主要义务
满足附件一第一部分的产品属性要求与第二部分漏洞处理要求，产品交付时不含已知可利用漏洞。
在支持周期内持续提供安全更新，并向用户清晰说明支持周期与更新方式。
识别并记录组件与依赖关系，按要求履行已利用漏洞与严重事件的报告义务。
English
- Meet the product properties in Annex I, Part I and the vulnerability handling requirements in Part II, and ship without known exploitable vulnerabilities.
- Provide security updates throughout the support period and clearly inform users of its duration and update mechanism.
- Identify and document components and dependencies, and report actively exploited vulnerabilities and severe incidents.