CVE-2025-63207
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.97%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 6.97% probability · 94th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- rvr/tex30lcd\/s firmware · rvr/tex50lcd\/s firmware · rvr/tex100lcd\/s firmware · rvr/tex150lcd\/s firmware · rvr/tex300lcd firmware · rvr/tex502lcd firmware · rvr/tex702lcd firmware · rvr/tex3500lcd firmware · rvr/tex1002lcd firmware · rvr/tex2000light firmware · rvr/tex2500lcd firmware
- Source
- cve@mitre.org
References
- https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63207_RVR%20Elettronica%20TEX%20Broken%20Access%20ControlExploit, Third Party Advisory
- https://www.rvr.it/en/Product
- https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63207_RVR%20Elettronica%20TEX%20Broken%20Access%20ControlExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.