Ilevia EVE X1 Server Privilege Escalation Vulnerability

A vulnerability allowing unauthorized privilege escalation to root has been identified in Ilevia EVE X1 Server firmware versions through 4.7.18.0.eden. This issue arises from an execution with unnecessary privileges in the sync_project.sh script. Ilevia has chosen not to address this vulnerability and advises customers to avoid exposing port 8080 to the internet.

Impact

Exploitation of this vulnerability allows an attacker to gain root privileges on the affected server.