CVE-2025-34513 — Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Command Injection
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execut…
Published: 2025-10-16 · CVSS: 9.3 · CVSS 4.0
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7