A couple of weeks ago I have found a vulnerability in a product. I have contacted them reporting it a week ago and also to get the CVE.
I didn't receive any answer from the mailing list and I would like what can I do in such a situation. In Mitre's CVE documentation they said only CNA's can request the CVE.
Thank you in advance.