Threats tagged 'ghsa-6xx3-64jx-cvcx'

A vulnerability in Ilevia EVE X1 Server Firmware version v4.7.18.0.eden and earlier Logic versions up to v6.00 - 2025_07_21 allows remote attackers to execute arbitrary code. The issue arises because the ping.php component does not securely filter IP parameters, leading to command injection risks. The vulnerability has a high severity score of 7.5 CVSS v3.1 and impacts integrity without affecting confidentiality or availability.