CVE-2025-14276
MediumCVSS 5.6Exploitation Probability (EPSS)
High risk76th percentile - higher than 76% of all known CVEs
Summary
A vulnerability was determined in Ilevia EVE X1 Server up to 4.6.5.0.eden. An unknown function of the file /ajax/php/leaf_search.php is impacted; manipulation of the argument line causes command injection. The attack can be initiated remotely and requires a high degree of complexity, though the exploit has been publicly disclosed.
Risk Assessment
A remote attacker can execute arbitrary system commands on the EVE X1 Server device, potentially leading to full system compromise. The risk is increased by the public disclosure of the exploit.
Recommendation
Upgrade Ilevia EVE X1 Server to a version containing the fix. The vendor also recommends closing the port to the outside world to reduce the attack surface.
Other vulnerabilities in Ilevia EVE X1 Server
See all- CVE-2025-60739Critical
In Ilevia EVE X1 Server firmware (version v4.7.18.0.eden and earlier), a CSRF vulnerability allows a remote attacker to execute arbitrary code via the /bh_web_backend component.
- CVE-2025-60738Critical
An issue in Ilevia EVE X1 Server Firmware versions up to v4.7.18.0.eden and Logic Version up to v6.00 - 2025_07_21 allows a remote attacker to execute arbitrary code via the ping.php component, which does not perform secure filtering on IP parameters.
Original NVD description (English source)
A vulnerability was determined in Ilevia EVE X1 Server up to 4.6.5.0.eden. Impacted is an unknown function of the file /ajax/php/leaf_search.php. This manipulation of the argument line causes command injection. The attack can be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been publicly disclosed and may be utilized. Upgrading the affected component is recommended. The vendor confirms the issue and recommends: "We already know that issue and on most devices are already solved, also it’s not needed to open the port to outside world so we advised our customer to close it".
Vulnerability data from NVD (NIST) · CISA KEV · EPSS