CVE-2025-34183 Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure
Unauthenticated attackers can retrieve plaintext credentials from exposed log files, leading to authentication bypass and system compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-34183?
CVE-2025-34183 is a critical vulnerability in Ilevia Srl. EVE X1 Server, published on 16 Sep 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential reuse.
Weakness: CWE-532
Which versions are affected by CVE-2025-34183?
It affects 1 product.
Products include Ilevia Eve X1 Server Firmware.
How do I fix CVE-2025-34183?
No fix has been published for CVE-2025-34183 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-34183 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-34183 exists.
Other vulnerabilities in Ilevia Srl. EVE X1 Server
- CVE-2025-60738 Command injection in n/a
- CVE-2025-60739 Cross-site request forgery in n/a
- CVE-2025-34513 Ilevia EVE X1 Server 4.7.18.0.eden Unauthenticated Command Injection
- CVE-2025-34515 Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation
- CVE-2025-34516 Ilevia EVE X1 Server 4.7.18.0.eden Use of Default Credentials
Sources
Also known as GHSA-8h56-g83q-ffr3.