CVE-2025-34183

Опубликовано: 16 сент. 2025

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential reuse.

Ссылки

https://packetstorm.news/files/id/208700/
Exploit
Third Party Advisory
https://www.ilevia.com/
Product
https://www.vulncheck.com/advisories/ilevia-eve-x1-server-credentials-leak-through-log-disclosure
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5957.php
Exploit
Release Notes
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5957.php
Exploit
Release Notes
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*

Версия до 4.7.18.0 (включая)

cpe:2.3:h:ilevia:eve_x1_server:-:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00423

Низкий

7.5 High

CVSS3

Дефекты

CWE-532

Связанные уязвимости

GHSA-8h56-g83q-ffr3