CVE-2024-1015

Description

Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

References

• https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-se-elektronic-gmbh-products ↗
• https://www.hackplayers.com/2024/01/cve-2024-1014-and-cve-2024-1015.html ↗
• https://www.se-elektronic.com/psirt-cybersecurity/ ↗
• https://www.se-elektronic.com/.well-known/csaf/advisories/2026/se-sa-2026_001.json ↗