Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2025-34183

Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure

Description

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential reuse.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ilevia Srl. EVE X1 Server

Default version status: unaffected

  • 0 to ≤ 4.7.18.0.eden (Logic version: 6.00)affected

References