CVE-2025-34515 — CRITICAL (9.8)

Q: How severe is CVE-2025-34515?

CVE-2025-34515 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Q: Is there a patch for CVE-2025-34515?

Check the references section above for vendor advisories and patch information. Affected products include: Ilevia Eve X1 Server Firmware, Ilevia Eve X1 Server.

Vulnerability Description

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows an attacker to escalate privileges to root. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ilevia	Eve X1 Server Firmware	<= 4.7.18.0
Ilevia	Eve X1 Server	-

Related Weaknesses (CWE)

CWE-250

References

https://www.ilevia.com/Product
https://www.vulncheck.com/advisories/ilevia-eve-x1-server-root-priv-escThird Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5965.php

FAQ

What is CVE-2025-34515?

CVE-2025-34515 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows an attacker to escalate privileges to root. Ilevia ...

How severe is CVE-2025-34515?

CVE-2025-34515 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2025-34515?

Check the references section above for vendor advisories and patch information. Affected products include: Ilevia Eve X1 Server Firmware, Ilevia Eve X1 Server.