CVE-2024-1015

Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve-coordination@incibe.es

Published

2024-01-29

Last modified

2026-07-20

Weaknesses

CWE-94

Affected products

• E-ddc3.3 Firmware (Se-elektronic)
• E-ddc3.3 (Se-elektronic Gmbh)

References

• https://www.hackplayers.com/2024/01/cve-2024-1014-and-cve-2024-1015.html
• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-se-elektronic-gmbh-products
• https://www.se-elektronic.com/.well-known/csaf/advisories/2026/se-sa-2026_001.json
• https://www.se-elektronic.com/psirt-cybersecurity/