Executive Summary

This vulnerability exists in Ilevia EVE X1 Server firmware versions up to 4.7.18.0.eden and involves the use of default credentials. It allows an unauthenticated attacker to gain remote access to the server, potentially compromising the system without needing any prior authentication.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can allow an attacker to remotely access the affected server without authentication, which could lead to unauthorized control, data theft, or disruption of services. Since the attacker does not need credentials, the risk of compromise is high if the vulnerable server is exposed, especially on port 8080.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, do not expose port 8080 of the Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden to the internet, as recommended by Ilevia. Since the vendor has declined to service this vulnerability, restricting external access to the affected service is the primary mitigation step.

Useful 0 Not Useful 0