A stored cross-site scripting vulnerability exists in the web management interface of the R.V.R. Elettronica TLK302T telemetry controller (firmware 1.5.1799).
References
| Link | Resource |
|---|---|
| https://github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-65228 | Exploit Third Party Advisory |
| https://www.rvr.it/en/products/components/telemetry-units-system/tlk300-series/tlk302t/ | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
11 Dec 2025, 16:04
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Rvr tlk302t Firmware
Rvr Rvr tlk302t |
|
| CPE | cpe:2.3:o:rvr:tlk302t_firmware:1.5.1799:*:*:*:*:*:*:* cpe:2.3:h:rvr:tlk302t:-:*:*:*:*:*:*:* |
|
| References | () https://github.com/iyadalkhatib98/My_CVES/tree/main/CVE-2025-65228 - Exploit, Third Party Advisory | |
| References | () https://www.rvr.it/en/products/components/telemetry-units-system/tlk300-series/tlk302t/ - Product |
08 Dec 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.5 |
| CWE | CWE-79 |
08 Dec 2025, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-12-08 21:16
Updated : 2025-12-11 16:04
NVD link : CVE-2025-65228
Mitre link : CVE-2025-65228
CVE.ORG link : CVE-2025-65228
JSON object : View
Products Affected
rvr
- tlk302t_firmware
- tlk302t
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')