Dashboard / CVE-2025-63207

CVE-2025-63207

CRITICAL
INFO Priority: 0.73 BB Relevance: 81/100
Published: 2025-11-19 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Network Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.

Weakness Classification (1)

Affected Software (11)

VendorProductVersion
rvr tex1002lcd_firmware texl-000400
rvr tex100lcd\/s_firmware texl-000400
rvr tex150lcd\/s_firmware texl-000400
rvr tex2000light_firmware texl-000400
rvr tex2500lcd_firmware texl-000400
rvr tex300lcd_firmware texl-000400
rvr tex30lcd\/s_firmware texl-000400
rvr tex3500lcd_firmware texl-000400
rvr tex502lcd_firmware texl-000400
rvr tex50lcd\/s_firmware texl-000400
rvr tex702lcd_firmware texl-000400

References & Advisories (2)

Bug Bounty Relevance

81 / 100
✓ Network accessible
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

9.8 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

7.40%
Raw Score 0.073990
Percentile 94.5%
Date 2026-11-14

EPSS Trend

2026-11-14
0.07399
2026-11-13
0.07399
2026-11-12
0.07399
2026-11-10
0.07399
2026-11-09
0.07399
2026-11-08
0.07399
2026-11-07
0.07399
2026-11-06
0.07399
2026-11-05
0.07399
2026-11-04
0.07399

Intelligence Sources

nvd ref →

External Links