Critical severity · published Nov 19, 2025
CVE-2025-63207
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html…
9.8
CVSS
7.4%
EPSS
No
On KEV
Description
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.4% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TF
Tex1002lcd Firmware · Rvr
texl-000400 · source: NVD
TF
Tex100lcd/s Firmware · Rvr
texl-000400 · source: NVD
TF
Tex150lcd/s Firmware · Rvr
texl-000400 · source: NVD
TF
Tex2000light Firmware · Rvr
texl-000400 · source: NVD
TF
Tex2500lcd Firmware · Rvr
texl-000400 · source: NVD
TF
Tex300lcd Firmware · Rvr
texl-000400 · source: NVD
TF
Tex30lcd/s Firmware · Rvr
texl-000400 · source: NVD
TF
Tex3500lcd Firmware · Rvr
texl-000400 · source: NVD
TF
Tex502lcd Firmware · Rvr
texl-000400 · source: NVD
TF
Tex50lcd/s Firmware · Rvr
texl-000400 · source: NVD
TF
Tex702lcd Firmware · Rvr
texl-000400 · source: NVD