← Database

CVE-2025-34185

HIGH CVSS: 7.5 Published: 2025-09-16 Modified: 2026-06-17

Description

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a pre-authentication file disclosure vulnerability via the 'db_log' POST parameter. Remote attackers can retrieve arbitrary files from the server, exposing sensitive system information and credentials.

Affected Platforms

Ilevia Eve X1 ServerIlevia Eve X1 Server Firmware

Weakness Type

CWE-22, CWE-200, CWE-22

References