ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2025-63207

PoC —
CVSS 3.1
9.8 critical
EPSS
7%p94
Published
()
Modified
Description

The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.

Vendors
rvr
Products
tex30lcd\/s firmware, tex50lcd\/s firmware, tex100lcd\/s firmware, tex150lcd\/s firmware, tex300lcd firmware, tex502lcd firmware, tex702lcd firmware, tex3500lcd firmware, tex1002lcd firmware, tex2000light firmware, tex2500lcd firmware
Weakness
CWE-287
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (7.0%)

In the news

No ingested article mentions this CVE yet.