Vulnerability Details CVE-2025-60738
An issue in Ilevia EVE X1 Server Firmware Version v4.7.18.0.eden and before Logic Version v6.00 - 2025_07_21 and before allows a remote attacker to execute arbitrary code via the ping.php component does not perform secure filtering on IP parameters
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.8%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2025-60738
-
cpe:2.3:h:ilevia:eve_x1_server:-
-
cpe:2.3:o:ilevia:eve_x1_server_firmware:4.7.18.0