CVE-2025-63207

moderate-risk
Published 2025-11-19

The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.

Do I need to act?

-
0.26% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (11)

Tex30Lcd\/S Firmware
Tex50Lcd\/S Firmware
Tex100Lcd\/S Firmware
Tex150Lcd\/S Firmware
Tex300Lcd Firmware
Tex502Lcd Firmware
Tex702Lcd Firmware
Tex3500Lcd Firmware
Tex1002Lcd Firmware
Tex2000Light Firmware
Tex2500Lcd Firmware

Affected Vendors

Rvr

References (3)

Exploit https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-6320...
Product https://www.rvr.it/en/
Exploit https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-6320...
49
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 1/34 · Minimal
Exposure 16/34 · Moderate