Unrated severityNVD Advisory· Published Sep 16, 2025· Updated Mar 23, 2026
Ilevia EVE X1/X5 Server 4.7.18.0.eden Reverse Rootshell
CVE-2025-34187
Description
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<= 4.7.18.0.eden+ 1 more
- (no CPE)range: <= 4.7.18.0.eden
- (no CPE)range: *
Patches
Vulnerability mechanics
References
4- packetstorm.news/files/id/209226/mitreexploit
- www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.phpmitretechnical-descriptionexploit
- www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshellmitrethird-party-advisory
- www.ilevia.commitreproduct
News mentions
0No linked articles in our index yet.