Ilevia EVE X1 Server firmware versions up to 4.7.18.0.eden use the insecure MD5 hashing algorithm without salting for password storage. This allows attackers who obtain the password database to efficiently perform offline attacks to recover original passwords. The vendor has declined to provide a fix and recommends not exposing port 8080 to the internet.