{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2025-10204/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2025-10204/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2025-10204/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2025-10204/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2025-10204/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2025-10204"},"sightings":{"href":"/api/v1/sightings/cve-2025-10204"}},"enrichments":{"cisa-kev":{"kev":false},"epss":{"epss":0.00483,"kev":false,"percentile":0.40788},"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2025/CVE-2025-10204.yaml","nuclei_template_severity":"high","nuclei_template_yaml":"id: CVE-2025-10204\n\ninfo:\n  name: AC Smart II - Authentication Bypass\n  author: theeldruin\n  severity: high\n  description: |\n    AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization.\n  impact: |\n    Attackers can change the administrator password without authorization, leading to full system takeover.\n  remediation: |\n    Update to the latest version that properly verifies login status and user permissions before password reset.\n  reference:\n    - https://www.notion.so/eldruin/Unauthenticated-Administrator-Password-Reset-AC-Smart-II-v2-1-9-Rev-2251-24d27474cccb80a68e47f907b94abed9\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-10204\n  classification:\n    cwe-id: CWE-306\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: html:\"Doc/WebLogin.asp\"\n    fofa-query: body=\"Doc/WebLogin.asp\"\n  tags: cve,cve2025,unauth,auth-bypass,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /Doc/WebLogin.asp HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains_all(body, \"div id=\\\"div_admin_pwd\\\" style=\\\"position:absolute;top:180px;left:50%;width:411px;height:228px;margin:0 0 0 -235px ;z-index:1; visibility: hidden;\",\"AC Smart\")'\n          - 'status_code == 200'\n        condition: and\n# digest: 4a0a00473045022020ef03a0ebe338f3fe88a4476096825f1b18c781016ef0adb7964e6e0e1bb1d8022100ddfa4ff3603614bd22654ffb5c377590a258671e72deaf6783512df7fc234baf:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2025-10204"}