{"id":"CVE-2024-1014","aliases":["EUVD-2024-16791","GHSA-fp4h-ppqj-prv5"],"status":"published","title":"Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3","description":"Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could interrupt the availability of the administration panel by sending multiple ICMP packets.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00715,"percentile":0.53997,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2024-01-29T13:44:49Z","modified":"2026-07-20T15:31:34Z","products":[{"vendor":"se-elektronic","product":"e-ddc3.3_firmware"},{"vendor":"se-elektronic gmbh","product":"e-ddc3.3"}],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-se-elektronic-gmbh-products","tags":["patch","x_transferred","Third Party Advisory"]},{"url":"https://www.hackplayers.com/2024/01/cve-2024-1014-and-cve-2024-1015.html","tags":["third-party-advisory","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://www.se-elektronic.com/psirt-cybersecurity/","tags":["patch","vendor-advisory"]},{"url":"https://www.se-elektronic.com/.well-known/csaf/advisories/2026/se-sa-2026_001.json"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1014"},{"url":"https://www.se-elektronic.com/psirt-cybersecurity"},{"url":"https://github.com/advisories/GHSA-fp4h-ppqj-prv5"}],"sources":{"cve":[{"id":"CVE-2024-1014","title":"Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3","description":"Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could interrupt the availability of the administration panel by sending multiple ICMP packets.","status":"published","published":"2024-01-29T13:44:49.968Z","modified":"2026-07-20T13:24:56.243Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:18.259965Z"}],"euvd":[{"id":"EUVD-2024-16791","description":"Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could interrupt the availability of the administration panel by sending multiple ICMP packets.","status":"published","published":"2024-01-29T13:44:49Z","modified":"2026-07-20T13:24:56Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T18:19:49.035342Z"}],"ghsa":[{"id":"GHSA-fp4h-ppqj-prv5","title":"Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions...","description":"Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could interrupt the availability of the administration panel by sending multiple ICMP packets.","status":"published","published":"2024-01-29T15:30:29Z","modified":"2026-07-20T15:31:34Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:09:36.398204Z"}],"nvd":[{"id":"CVE-2024-1014","description":"Uncontrolled resource consumption vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could interrupt the availability of the administration panel by sending multiple ICMP packets.","status":"published","published":"2024-01-29T14:15:09.437Z","modified":"2026-07-20T14:16:50.847Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:09:32.147098Z"}]}}