CNNVD-202511-2336 Information

CNNVD ID

CNNVD-202511-2336

CVE-2025-60737

  • CNNVD Published: 2025-11-20

Description (Chinese)

Ilevia EVE X1 Server是意大利Ilevia公司的一款智能家居与楼宇自动化。 Ilevia EVE X1 Server存在安全漏洞,该漏洞源于/index.php组件存在跨站脚本漏洞,可能导致执行任意代码。

Description (English)

Ilevia EVE X1 Server is an intelligent home and building automation for Ilevia in Italy. Ilevia EVE X1 Server has a security loophole, which stems from the presence of a cross-site script gap in the /index.php component, which may lead to the implementation of any code.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Ilevia

Published

2025-11-20

Last Modified

2026-02-24

References

https://github.com/iSee857/ilevia-EVE-X1-Server-CSRF https://access.redhat.com/security/cve/cve-2025-60737

Share on: