ilevia eve x1 server firmware

Name: ilevia eve x1 server firmware
Brand: ilevia

productUS

cpe:2.3:o:ilevia:eve_x1_server_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

5critical7high1medium0low

updated 2026-10-28

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-34515US	critical9.8	7.97% (95th)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-34513US	critical9.8	7.62% (95th)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-34187US	high8.8	3.27% (88th)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34184US	critical9.8	2.74% (86th)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34514US	high8.8	1.99% (81st)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-60738US	—	1.07% (65th)	—	no fix	2025-11-20	= 4.7.18.0
CVE-2025-34186US	critical9.8	0.87% (59th)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34185US	high7.5	0.84% (58th)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34183US	high7.5	0.70% (53rd)	—	no fix	2025-09-16	≤ 4.7.18.0
CVE-2025-34518US	high7.5	0.66% (51st)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-34517US	high7.5	0.66% (51st)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-34516US	critical9.8OT elevated	0.58% (48th)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-34512US	medium6.1	0.41% (35th)	—	no fix	2025-10-16	≤ 4.7.18.0
CVE-2025-60739US	—	0.35% (28th)	—	no fix	2025-11-25	= 4.7.18.0
CVE-2025-60737US	—	0.34% (27th)	—	no fix	2025-11-20	≤ 4.7.18.0
CVE-2025-34519US	high7.5OT elevated	0.31% (23rd)	—	no fix	2025-10-16	≤ 4.7.18.0

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')6 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-1392Use of Default Credentials1 CVEs
CWE-250Execution with Unnecessary Privileges1 CVEs
CWE-269Improper Privilege Management1 CVEs
CWE-287Improper Authentication1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.