CVE Intelligence

Rvr vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Rvr products: 2 record(s), with severity, exploitation and fixes.

Tex30lcd/s Firmware 1Tex50lcd/s Firmware 1Tex100lcd/s Firmware 1Tex150lcd/s Firmware 1Tex300lcd Firmware 1Tex502lcd Firmware 1Tex702lcd Firmware 1Tex3500lcd Firmware 1Tex1002lcd Firmware 1Tex2000light Firmware 1Tex2500lcd Firmware 1Tlk302t Firmware 1

Exploited only (KEV) →

CVE-2025-65228 Low · 3.5 CWE-79 Dec 8, 2025
Cross-site Scripting (XSS) in Rvr Tlk302t Firmware
A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T telemetry controller (firmware 1.5.1799).
CVE-2025-63207 Critical · 9.8 CWE-287 Nov 19, 2025
Improper Authentication in Rvr Tex30lcd/s Firmware
The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.