CVE-2025-63207
Critical
Description
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.
SeverityCritical
CVSS9.8
Exploit probability—
ProductRvr Tex30lcd\/s Firmware
PublishedNov 19, 2025
First seenNov 19, 2025
Weakness typeCWE-287Improper authentication
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rvr tex30lcd\/s_firmware | texl-000400 | — |
| rvr tex50lcd\/s_firmware | texl-000400 | — |
| rvr tex100lcd\/s_firmware | texl-000400 | — |
| rvr tex150lcd\/s_firmware | texl-000400 | — |
| rvr tex300lcd_firmware | texl-000400 | — |
| rvr tex502lcd_firmware | texl-000400 | — |
| rvr tex702lcd_firmware | texl-000400 | — |
| rvr tex3500lcd_firmware | texl-000400 | — |
| rvr tex1002lcd_firmware | texl-000400 | — |
| rvr tex2000light_firmware | texl-000400 | — |
| rvr tex2500lcd_firmware | texl-000400 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.