CVE-2025-34516 is a critical vulnerability in Ilevia Srl.'s EVE X1 Server firmware (versions ≤ 4.7.18.0.eden) caused by the use of default credentials (CWE-1392). This vulnerability enables unauthenticated remote attackers to access the server via port 8080. The CVSS 4.0 base score is 9.3, reflecting high attack vector and impact metrics. The vendor has explicitly declined to provide a patch or official remediation and recommends customers not expose the affected port externally.

Exploitation of this vulnerability allows unauthenticated attackers to gain remote access to the EVE X1 Server, potentially leading to full compromise of the device. Given the critical CVSS score of 9.3, the impact includes high confidentiality, integrity, and availability loss. No known exploits are reported in the wild at this time.

No official patch or fix is available from the vendor, as Ilevia Srl. has declined to service this vulnerability. The vendor recommends that customers do not expose port 8080 to the internet to reduce the risk of exploitation. Organizations should implement network-level controls to restrict access to this port and consider isolating affected devices from untrusted networks.