{"id":"CVE-2024-1015","aliases":["EUVD-2024-16792","GHSA-9x52-pxhj-x4j7"],"status":"published","title":"Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3","description":"Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01751,"percentile":0.78026,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2024-01-29T13:46:32Z","modified":"2026-07-20T15:31:34Z","products":[{"vendor":"se-elektronic","product":"e-ddc3.3_firmware"},{"vendor":"se-elektronic gmbh","product":"e-ddc3.3"}],"references":[{"url":"https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-se-elektronic-gmbh-products","tags":["patch","x_transferred","Third Party Advisory"]},{"url":"https://www.hackplayers.com/2024/01/cve-2024-1014-and-cve-2024-1015.html","tags":["third-party-advisory","x_transferred","Third Party Advisory"]},{"url":"https://www.se-elektronic.com/psirt-cybersecurity/","tags":["patch","vendor-advisory"]},{"url":"https://www.se-elektronic.com/.well-known/csaf/advisories/2026/se-sa-2026_001.json"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-1015"},{"url":"https://www.se-elektronic.com/psirt-cybersecurity"},{"url":"https://github.com/advisories/GHSA-9x52-pxhj-x4j7"}],"sources":{"cve":[{"id":"CVE-2024-1015","title":"Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3","description":"Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device.","status":"published","published":"2024-01-29T13:46:32.256Z","modified":"2026-07-20T13:26:41.162Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:34:18.259965Z"}],"euvd":[{"id":"EUVD-2024-16792","description":"Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device.","status":"published","published":"2024-01-29T13:46:32Z","modified":"2026-07-20T13:26:41Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T18:19:49.035342Z"}],"ghsa":[{"id":"GHSA-9x52-pxhj-x4j7","title":"Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03...","description":"Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device.","status":"published","published":"2024-01-29T15:30:29Z","modified":"2026-07-20T15:31:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T15:09:36.398204Z"}],"nvd":[{"id":"CVE-2024-1015","description":"Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device.","status":"published","published":"2024-01-29T14:15:09.657Z","modified":"2026-07-20T14:16:51.977Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:09:32.147098Z"}]}}