Unrated severityNVD Advisory· Published Sep 16, 2025· Updated Mar 23, 2026
Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell
CVE-2025-34187
Description
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.
Affected products
2<= 4.7.18.0.eden+ 1 more
- (no CPE)range: <= 4.7.18.0.eden
- (no CPE)range: *
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- packetstorm.news/files/id/209226/mitreexploit
- www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.phpmitretechnical-descriptionexploit
- www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshellmitrethird-party-advisory
- www.ilevia.commitreproduct
News mentions
0No linked articles in our index yet.