RCE in Deltra Electronics Dvw-W02w2-E2
CVE-2024-3871
The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and stack overflows vulnerabilities. Successful exploitation of these flaws would allow remote unauthenticated attackers to gain remote code execution with elevated privileges on the affected devices. This issue affects DVW-W02W2-E2 through version 2.5.2.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.017 (74.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Deltra Electronics Dvw-w02w2-e2 — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-3871?
- CVE-2024-3871 is a critical-severity vulnerability in Deltra Electronics Dvw-W02w2-E2, classified under Command Injection. CVSS score: 9.8/10. Published 2024-04-16.
- How severe is CVE-2024-3871?
- Critical severity. CVSS v3 base score is 9.8 out of 10.