CVE-2025-34183: Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from expose...

Summary

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential reu...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ilevia	eve_x1_server_firmware	<= 4.7.18.0 `cpe:2.3:o:ilevia:eve_x1_server_firmware::::::::`

Original advisory text

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from expose...

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential reuse.

References

https://packetstorm.news/files/id/208700/ Exploit Third Party Advisory
https://www.ilevia.com/ Product
https://www.vulncheck.com/advisories/ilevia-eve-x1-server-credentials-leak-throu... Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5957.php Exploit Release Notes Third Party Advisory