CVE-2025-34187

critical · 9.3

Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a misconfiguration in the sudoers file that allows passwordless execution of certain Bash scripts. If these scripts are writable by web-facing users or accessible via command injection, attackers can replace them with malicious payloads. Execution with sudo grants full root access, resulting in remote privilege escalation and potential system compromise.

9.3

CVSS

3.2%

EPSS (exploit prob.)

87th

EPSS percentile

2025-09-16

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-78CWE-269

Affected products

Vendor	Product	Affected versions
ilevia	eve_x1_server_firmware	<= 4.7.18.0
ilevia	eve_x1_server	all versions

Check a specific version with /api/v1/cve/match.

References

https://packetstorm.news/files/id/209226/
https://www.ilevia.com/
https://www.vulncheck.com/advisories/ilevia-eve-x1-x5-server-reverse-rootshell
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5959.php

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-34187