Ilevia EVE X1 Server Absolute Path Traversal Vulnerability Allowing Arbitrary File Read

An absolute path traversal vulnerability has been identified in Ilevia EVE X1 Server firmware versions through 4.7.18.0.eden. The vulnerability exists in the 'get_file_content.php' file, where an attacker can read arbitrary files from the server by exploiting the path traversal flaw. Ilevia has not addressed this vulnerability and advises customers to avoid exposing port 8080 to the internet.

Impact

Exploitation of this vulnerability allows for unauthorized reading of files on the server, potentially leading to the disclosure of sensitive information.

Reproduction

The vulnerability can be reproduced by sending a POST request to the '/ajax/php/get_file_content.php' endpoint with a crafted 'file' parameter that traverses directories. This request can be made using tools like curl or Postman.

Remediation

Ilevia recommends not exposing port 8080 to the internet.