Description
Ilevia EVE X1 Server存在远程命令执行，利用此漏洞可获取服务器权限。
Ilevia EVE X1 Server存在远程命令执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-60738
https://github.com/advisories/GHSA-vrhc-cgwx-m2qw
https://www.vulncheck.com/advisories/ilevia-eve-x1-server-auth-command-injection
https://fortiguard.fortinet.com/encyclopedia/ips/58761
https://www.exploit-db.com/exploits/52437
https://forum.it.mk/threads/ilevia-eve-x1-server-4-7-18-0-eden-mbus-unauthenticated-remote-command-injection.88805/
https://cn-sec.com/archives/tag/%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C/page/3
https://app.opencve.io/cve/?vendor=ilevia&product=eve_x1_server