CVE-2025-34516
Unknown Unknown - Not Provided

BaseFortify

Vulnerability report for CVE-2025-34516, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2025-10-16

Last updated on: 2025-11-03

Assigner: VulnCheck

Description

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default credentials vulnerability that allows an unauthenticated attacker to obtain remote access. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-10-16
Last Modified
2025-11-03
Generated
2026-07-06
AI Q&A
2025-10-16
EPSS Evaluated
2026-07-05
NVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
ilevia eve_x1_server_firmware to 4.7.18.0 (inc)
ilevia eve_x1_server *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1392 The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in Ilevia EVE X1 Server firmware versions up to 4.7.18.0.eden and involves the use of default credentials. It allows an unauthenticated attacker to gain remote access to the server, potentially compromising the system without needing any prior authentication.

Impact Analysis

The vulnerability can allow an attacker to remotely access the affected server without authentication, which could lead to unauthorized control, data theft, or disruption of services. Since the attacker does not need credentials, the risk of compromise is high if the vulnerable server is exposed, especially on port 8080.

Mitigation Strategies

To mitigate this vulnerability, do not expose port 8080 of the Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden to the internet, as recommended by Ilevia. Since the vendor has declined to service this vulnerability, restricting external access to the affected service is the primary mitigation step.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-34516. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart