ilevia security advisories
4 threat alerts tracking vulnerabilities and security advisories that affect ilevia products.
Vulnios monitors ilevia CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent ilevia security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2025-34513 — ilevia — eve_x1_server_firmware, eve_x1_server
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an OS command injection vulnerability in mbus_build_from_csv.php that allows an unauthenticated attacker to execute arbitrary code. Ilevi
criticalCVE-2025-34513Critical Vulnerability: CVE-2025-34515 — ilevia — eve_x1_server_firmware, eve_x1_server
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain an execution with unnecessary privileges vulnerability in sync_project.sh that allows an attacker to escalate privileges to root. Ilevia
criticalCVE-2025-34515Critical Vulnerability: CVE-2025-34516 — ilevia — eve_x1_server_firmware, eve_x1_server
Ilevia EVE X1 Server firmware versions ≤ 4.7.18.0.eden contain a use of default credentials vulnerability that allows an unauthenticated attacker to obtain remote access. Ilevia has declined to servic
criticalCVE-2025-34516Critical Vulnerability: CVE-2025-34186 — ilevia — eve_x1_server_firmware, eve_x1_server
Ilevia EVE X1/X5 Server version ≤ 4.7.18.0.eden contains a vulnerability in its authentication mechanism. Unsanitized input is passed to a system() call for authentication, allowing attackers to injec
criticalCVE-2025-34186
Track ilevia exposure across your environment
Vulnios automatically cross-references your asset inventory against new ilevia CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan