CVE-2025-34187

Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell

State: Published
Severity: 9.3 Critical
Published: Sep 16, 2025
Updated: May 15, 2026
Reserved: Apr 15, 2025

Description

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	VulnCheck

Weaknesses

CWE-269 Improper Privilege Management
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
EVE X1/X5 ServerIlevia Srl.	4.7.18.0.eden (Logic version: 6.00) and earlierAffected

References

https://www.ilevia.com/product
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.phptechnical-descriptionexploit
https://packetstorm.news/files/id/209226/exploit
https://www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshellthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.