Insecure Hashing Algorithm in Ilevia EVE X1 Server Firmware

CVE-2025-34519

What is CVE-2025-34519?

The Ilevia EVE X1 Server firmware contains a vulnerability due to the use of the MD5 hashing function for password storage without applying a per-password salt. This design flaw allows attackers to exploit the stored password database effectively through offline dictionary, rainbow-table, or brute-force methods to retrieve original passwords. Ilevia advises users to prevent external exposure of port 8080 as a security measure in response to this vulnerability.

References