CVE-2025-34183CWE-532

Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure

Critical · published September 16, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
52.5
In the wild
Unconfirmed
What it is

Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains a vulnerability in its server-side logging mechanism that allows unauthenticated remote attackers to retrieve plaintext credentials from exposed .log files. This flaw enables full authentication bypass and system compromise through credential reuse.

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00696 · 52.5th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-09-16T19:39Z
EPSS history
Timeline
  • 16 SEP 19:39Z
    Ilevia EVE X1 Server 4.7.18.0.eden Credentials Leak Through Log Disclosure
    cvelistv5