CVE-2025-63207
Full vulnerability record from the local CVENow database.
Description
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2025-11-19 18:15:48.793000
Last modified
2026-11-05 13:10:00.180000
View original CVE JSON
{
"id": "CVE-2025-63207",
"sourceIdentifier": "[email protected]",
"published": "2025-11-19T18:15:48.793",
"lastModified": "2026-11-05T13:10:00.180",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise."
},
{
"lang": "es",
"value": "El producto R.V.R Elettronica TEX (firmware TEXL-000400, GUI web TLAN-000400) es vulnerable a control de acceso roto debido a comprobaciones de autenticación inadecuadas en el endpoint /_Passwd.html. Un atacante puede enviar una solicitud POST no autenticada para cambiar las contraseñas de Administrador, Operador y Usuario, lo que resulta en un compromiso completo del sistema."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"version": "n/a",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-11-20T16:05:15.241242Z",
"id": "CVE-2025-63207",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex30lcd\\/s_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "2DDF5675-06D9-4A01-9490-A9D83F1BA254"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex30lcd\\/s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "53A05670-711A-4D6F-89BB-8849DE507C76"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex50lcd\\/s_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "3CB3442C-B734-4A95-A25D-CF99E07E588B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex50lcd\\/s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "ACF54374-2D10-44DC-B481-F2449F552BB3"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex100lcd\\/s_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "B85488D3-A8E1-4175-83F9-CAE585C4DAB6"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex100lcd\\/s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "64F185C9-A27D-4AFC-A54A-1C44802A5A66"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex150lcd\\/s_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "5A48CEA2-0AD8-4B71-A97D-08E7D08ED47B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex150lcd\\/s:-:*:*:*:*:*:*:*",
"matchCriteriaId": "E75BDA11-64D1-4B95-91E6-91AFB96F4645"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex300lcd_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "C03FFF4B-9FD0-4B0C-97B3-A3242FEA5997"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex300lcd:-:*:*:*:*:*:*:*",
"matchCriteriaId": "8DA92AF5-0B36-4302-8883-8BA850A7F14F"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex502lcd_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "0355114A-0AC4-48F9-B8C8-024F10DF26CD"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex502lcd:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CA1BF06A-C075-4800-8148-98B7893EE420"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex702lcd_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "FF2E4711-65E2-4E5A-8289-1C363C1604F9"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex702lcd:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3BC81BA3-7998-40BB-BE4C-3B356B6E24AF"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex3500lcd_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "62922A5A-4B27-46B6-8BAE-8C2C2EE6874A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex3500lcd:-:*:*:*:*:*:*:*",
"matchCriteriaId": "FE5ADADE-4D33-40D0-ACAC-B67E444E82E2"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex1002lcd_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "D62504CB-796F-4B47-BB9C-39C349C28A9A"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex1002lcd:-:*:*:*:*:*:*:*",
"matchCriteriaId": "A99A80B0-50CD-4115-A161-F4AEFF2E5931"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex2000light_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "F6B77727-86B7-4590-95CA-928657E82326"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex2000light:-:*:*:*:*:*:*:*",
"matchCriteriaId": "636F6C0B-2756-47D1-9699-3F8A51C698A3"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:rvr:tex2500lcd_firmware:texl-000400:*:*:*:*:*:*:*",
"matchCriteriaId": "34614E9B-4BC0-45BE-945D-3752697AC709"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:rvr:tex2500lcd:-:*:*:*:*:*:*:*",
"matchCriteriaId": "4777DA5E-B154-4FAD-920C-95635C8EA6B9"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63207_RVR%20Elettronica%20TEX%20Broken%20Access%20Control",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.rvr.it/en/",
"source": "[email protected]",
"tags": [
"Product"
]
},
{
"url": "https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63207_RVR%20Elettronica%20TEX%20Broken%20Access%20Control",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
]
}
]
}