{"id":"CVE-2025-63207","aliases":["EUVD-2025-198191","GHSA-ppm2-7rr7-h984"],"status":"published","title":"The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to...","description":"The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.07399,"percentile":0.94474,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2025-11-19T00:00:00Z","modified":"2026-11-05T13:10:00Z","products":[{"vendor":"rvr","product":"tex1002lcd_firmware"},{"vendor":"rvr","product":"tex100lcd\\/s_firmware"},{"vendor":"rvr","product":"tex150lcd\\/s_firmware"},{"vendor":"rvr","product":"tex2000light_firmware"},{"vendor":"rvr","product":"tex2500lcd_firmware"},{"vendor":"rvr","product":"tex300lcd_firmware"},{"vendor":"rvr","product":"tex30lcd\\/s_firmware"},{"vendor":"rvr","product":"tex3500lcd_firmware"},{"vendor":"rvr","product":"tex502lcd_firmware"},{"vendor":"rvr","product":"tex50lcd\\/s_firmware"},{"vendor":"rvr","product":"tex702lcd_firmware"}],"references":[{"url":"https://www.rvr.it/en/","tags":["Product"]},{"url":"https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63207_RVR%20Elettronica%20TEX%20Broken%20Access%20Control","tags":["exploit","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-63207"},{"url":"https://www.rvr.it/en"},{"url":"https://github.com/advisories/GHSA-ppm2-7rr7-h984"}],"sources":{"cve":[{"id":"CVE-2025-63207","description":"The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.","status":"published","published":"2025-11-19T00:00:00Z","modified":"2025-11-20T16:06:04.627Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:32:45.503988Z"}],"euvd":[{"id":"EUVD-2025-198191","description":"The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.","status":"published","published":"2025-11-19T00:00:00Z","modified":"2025-11-20T16:06:04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:14.564249Z"}],"ghsa":[{"id":"GHSA-ppm2-7rr7-h984","title":"The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to...","description":"The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.","status":"published","published":"2025-11-19T18:31:21Z","modified":"2025-11-20T18:32:08Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:54.23412Z"}],"nvd":[{"id":"CVE-2025-63207","description":"The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.","status":"published","published":"2025-11-19T18:15:48.793Z","modified":"2026-11-05T13:10:00.18Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-287"],"updated_at":"2026-11-05T19:55:51.56159Z"}]}}