CNNVD-202510-2328 Information

CNNVD ID

CNNVD-202510-2328

CVE-2025-34515

  • CNNVD Published: 2025-10-16

Description (Chinese)

Ilevia EVE X1 Server是意大利Ilevia公司的一款智能家居与楼宇自动化。 Ilevia EVE X1 Server 4.7.18.0.eden及之前版本存在安全漏洞,该漏洞源于sync_project.sh中存在不必要的特权执行,可能导致权限提升。

Description (English)

Ilevia EVE X1 Server is an intelligent home and building automation for Ilevia in Italy. Ilevia X1 Server 4.7.18.0.eden and previous versions had a security loophole, which stemmed from the unnecessary privileges in sync project.sh, which could lead to an increase in privileges.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Ilevia

Published

2025-10-16

Last Modified

2026-02-24

References

https://www.vulncheck.com/advisories/ilevia-eve-x1-server-root-priv-esc https://www.ilevia.com/ https://access.redhat.com/security/cve/cve-2025-34515

Share on: