Vulnerability · Published Sep 16, 2025 · Assigned by VulnCheck
CVE-2025-34187Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell
Critical 9.3
In plain English
A critical-severity privilege mismanagement in EVE X1/X5 Server from Ilevia Srl.. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.3% (higher than 88% of all known vulnerabilities).
Official description
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ilevia Srl. | EVE X1/X5 Server | 0 – through 4.7.18.0.eden (Logic version: 6.00) |
Weakness: CWE-269, CWE-78 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
References
- https://www.ilevia.com/ product
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.php technical-description, exploit
- https://packetstorm.news/files/id/209226/ exploit
- https://www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshell third-party-advisory