CVE-2025-34515: Ilevia Eve x1 Server Firmware

Critical severity, CVSS 9.8. EPSS: 8% chance of exploitation in the next 30 days.

Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows an attacker to escalate privileges to root. Ilevia has declined to service this vulnerability, and recommends that customers not expose port 8080 to the internet.

Affected products

• Ilevia Eve x1 Server Firmware: up to and including 4.7.18.0

Published 2025-10-16. Last modified 2026-10-09.