CVE-2024-1015

CriticalCVSS 9.8

Published: 29/01/2024(UTC)Updated: 20/07/2026(UTC)Translated: 21/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.45%

70th percentile - higher than 70% of all known CVEs

Summary

Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker can send operating system commands to the device via the web configuration functionality.

Risk Assessment

The risk involves potential full device takeover by an unauthorized attacker, leading to data integrity and confidentiality breaches and system disruption.

Recommendation

Immediately update the firmware to the latest version and restrict access to the web configuration interface to trusted networks only.

Original NVD description (English source)

Remote command execution vulnerability in SE-elektronic GmbH E-DDC3.3 affecting versions 03.07.03 and higher. An attacker could send different commands from the operating system to the system via the web configuration functionality of the device.