Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xgvx-j695-6gj9

Опубликовано: 16 окт. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 9.3

Описание

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.

EPSS

Процентиль: 91%
0.06963
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-78

Связанные уязвимости

nvd
17 дней назад

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.

EPSS

Процентиль: 91%
0.06963
Низкий

9.3 Critical

CVSS4

Дефекты

CWE-78