CVE-2025-60738

CRITICAL · 9.8 CVSS Gepubliceerd: 20-11-2025 CWE-78

Beschrijving

An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote attacker to execute arbitrary code via the ping.php component does not perform secure filtering on IP parameters

Vendors

Ilevia

Affected products

Eve X1 Server Firmware Eve X1 Server

References

github.com