CVE-2025-60738

An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote attacker to execute arbitrary code via the ping.php component does not perform secure filtering on IP parameters

Score
CVSS 3.1 9.8 Critical
Status
Analyzed - cve@mitre.org
Published
2025-11-20
Last modified
2025-11-21
Weaknesses
CWE-78

Affected products

References

 
 
© AVABIS GmbH privacypolicy about