SE-Elektronic DDC Controller Security Advisory: CVE-2024-1015/1014

Vulnerability Overview The SE-Elektronic PSIRT (Product Security Incident Response Team) is responsible for managing and handling security vulnerabilities in its products and services. The team is committed to ensuring product security and provides detailed handling recommendations, security updates, and patches when new vulnerabilities or threats are discovered. Scope of Impact Products: SE-Elektronic’s DDC controllers, automation solutions, and BACnet systems. Software: Firmware, embedded software, and related applications. Digital Components: Digital components associated with the aforementioned products. Remediation Steps 1. Report Vulnerabilities: - Report potential security vulnerabilities via email to . - Provide detailed information, including the product name, version, firmware/build, usage environment, vulnerability description, reproduction steps, and technical details. 2. Evaluation and Handling: - SE-Elektronic will handle reports in a transparent, structured, and responsible manner. - Conduct an initial technical assessment and collaborate with relevant teams to determine a solution. 3. Release Updates: - Publish security advisories or updates based on the severity and relevance of the vulnerability. - Provide necessary patches and remediation measures. 4. Acknowledgment: - Thank security researchers who responsibly report vulnerabilities and may attribute them upon release. Current Security Advisories CVE-2024-1015: - Title: Multiple vulnerabilities in firmware V03.07.03 and later - Score: 9.8 - Last Updated: July 7, 2026 - Reporter: Carlos Antonini (National Cybersecurity Institute, INCIBE, Spain) - Download PDF: Link - CSAF: Link CVE-2024-1014: - Title: Multiple vulnerabilities in firmware V03.07.03 and later - Score: 6.2 - Last Updated: July 7, 2026 - Reporter: Carlos Antonini (National Cybersecurity Institute, INCIBE, Spain) - Download PDF: Link - CSAF: Link Contact Information Email: PGP Public Key: Download PGP Fingerprint: Additional Information Responsible Security Research: SE-Elektronic welcomes and supports responsible security research, provided that its guidelines are followed. Legal Assurance: SE-Elektronic commits to not taking legal action against individuals who responsibly report vulnerabilities. --- Summary: The SE-Elektronic PSIRT team is responsible for managing and handling security vulnerabilities in its products and services, providing detailed reporting guidelines and remediation steps to ensure product security and reliability.

Goal Reached Thanks to every supporter — we hit 100%!

SE-Elektronic DDC Controller Security Advisory: CVE-2024-1015/1014