Kritik CVSS 9.8 PoC var
CVE-2025-63207: Tex30lcd/s Firmware: hatalı kimlik doğrulama
Açıklama (NVD)
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.
Özet bilgiler
- Ürün
- Rvr Tex30lcd/s Firmware
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %7,40 (yüzdelik 94)
- CWE
- CWE-287
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| rvr-tex30lcd-s-firmware | texl-000400 | texl-000400 | — |
| rvr-tex50lcd-s-firmware | texl-000400 | texl-000400 | — |
| rvr-tex100lcd-s-firmware | texl-000400 | texl-000400 | — |
| rvr-tex150lcd-s-firmware | texl-000400 | texl-000400 | — |
| rvr-tex300lcd-firmware | texl-000400 | texl-000400 | — |
| rvr-tex502lcd-firmware | texl-000400 | texl-000400 | — |
| rvr-tex702lcd-firmware | texl-000400 | texl-000400 | — |
| rvr-tex3500lcd-firmware | texl-000400 | texl-000400 | — |
| rvr-tex1002lcd-firmware | texl-000400 | texl-000400 | — |
| rvr-tex2000light-firmware | texl-000400 | texl-000400 | — |
| rvr-tex2500lcd-firmware | texl-000400 | texl-000400 | — |