High severity8.8NVD Advisory· Published Sep 16, 2025· Updated Jun 17, 2026
CVE-2025-34187
CVE-2025-34187
Description
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3*+ 1 more
- (no CPE)range: *
- (no CPE)range: <=4.7.18.0.eden
- cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*Range: <=4.7.18.0
Patches
Vulnerability mechanics
References
4- packetstorm.news/files/id/209226/nvdExploitPermissions RequiredThird Party Advisory
- www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.phpnvdExploitThird Party Advisory
- www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshellnvdThird Party Advisory
- www.ilevia.comnvdProduct
News mentions
0No linked articles in our index yet.