Eve X1/X5 Server
Approved changes feed: RSS · Atom
cpe:2.3:a:ilevia_srl.:eve_x1/x5_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Ilevia Srl. (5a8a540f-0434-5719-bf5f-ae1afee21de1) |
|---|---|
| Product | Eve X1/X5 Server (6d89ac5b-6928-55bd-af7b-e916156f865a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-34187 |
vulnerable | 2026-06-08 07:19:02.767410 |
Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.
Published: 2025-09-16T19:45:42.015Z
Updated: 2026-05-15T11:15:08.343Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-34186 |
vulnerable | 2026-06-08 07:19:02.766790 |
Ilevia EVE X1/X5 Server 4.7.18.0.eden Authentication Bypass
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() call for authentication, allowing attackers to inject special characters and manipulate command parsing. Because the binary interprets non-zero exit codes from system() as successful authentication, remote attackers can bypass authentication and gain full access to the system.
Published: 2025-09-16T19:45:01.996Z
Updated: 2026-05-26T11:51:52.095Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.