CVE-2025-63207 (CVSS 9.8): Critical Broken Access Control Flaw Exposes R.V.R Elettronica TEX Devices to Full System Takeover

A critical vulnerability (CVE-2025-63207) has been discovered in R.V.R Elettronica's TEX broadcast hardware, scoring 9.8 on the CVSS scale. The flaw allows attackers to reset user passwords, including the administrator's, via an unauthenticated HTTP request to the /_Passwd.html endpoint, which lacks proper authentication checks. This vulnerability enables complete system takeover, affecting the Authentication & Authorization subsystem. Administrators are advised to restrict access to the endpoint, monitor logs for unauthorized changes, and secure admin credentials until a firmware patch is released.