What’s Vulnerable › Vulnerabilities

CVE-2024-3871: Authenticated Remote Command Injection in Delta Electronics DVW

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-04-16 · updated 2026-06-17
• Weakness: CWE-77

Description

The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and stack overflows vulnerabilities. Successful exploitation of these flaws would allow remote unauthenticated attackers to gain remote code execution with elevated privileges on the affected devices. This issue affects DVW-W02W2-E2 through version 2.5.2.

Affected products

• deltaww Dvw-W02W2-E2 Firmware: through 2.5.2

References

• https://onekey.com/
• https://onekey.com/

Get alerted when CVE-2024-3871 or the next vulnerability affects your stack