Description
Ilevia EVE X1 Server 系统中，/ajax/php/leaf_replace_device.php 接口存在命令执行漏洞，该接口在处理用户提供的参数时缺乏有效的安全校验，攻击者可构造恶意请求触发服务器执行任意系统命令，从而实现远程命令执行。
Ilevia EVE X1 Server /ajax/php/leaf_replace_device.php 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/iSee857/ilevia-EVE-X1-Server
https://www.vulncheck.com/advisories/ilevia-eve-x1-server-unauth-command-injection
https://app.opencve.io/cve/?vendor=ilevia&product=eve_x1_server