CVE-2025-34183 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retri…
Critical CVSS: 9.3

CVE-2025-34183

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential reuse.
Vendor
Ilevia
Product
Eve X1 Server Firmware
CWE
CWE-532
Yayın Tarihi
2025-09-16 20:15:34
Güncelleme
2025-09-25 14:56:22
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-532 Eve X1 Server Firmware CRITICAL Ilevia 2025

Referanslar

https://packetstorm.news/files/id/208700/ https://www.ilevia.com/ https://www.vulncheck.com/advisories/ilevia-eve-x1-server-credentials-leak-through-log-disclosure https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5957.php https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5957.php