{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2025-10204/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2025-10204/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2025-10204/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2025-10204/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2025-10204/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2025-10204"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2025-10204"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.00483,
      "kev": false,
      "percentile": 0.40788
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2025/CVE-2025-10204.yaml",
      "nuclei_template_severity": "high",
      "nuclei_template_yaml": "id: CVE-2025-10204\n\ninfo:\n  name: AC Smart II - Authentication Bypass\n  author: theeldruin\n  severity: high\n  description: |\n    AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization.\n  impact: |\n    Attackers can change the administrator password without authorization, leading to full system takeover.\n  remediation: |\n    Update to the latest version that properly verifies login status and user permissions before password reset.\n  reference:\n    - https://www.notion.so/eldruin/Unauthenticated-Administrator-Password-Reset-AC-Smart-II-v2-1-9-Rev-2251-24d27474cccb80a68e47f907b94abed9\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-10204\n  classification:\n    cwe-id: CWE-306\n  metadata:\n    verified: true\n    max-request: 1\n    shodan-query: html:\"Doc/WebLogin.asp\"\n    fofa-query: body=\"Doc/WebLogin.asp\"\n  tags: cve,cve2025,unauth,auth-bypass,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /Doc/WebLogin.asp HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains_all(body, \"div id=\\\"div_admin_pwd\\\" style=\\\"position:absolute;top:180px;left:50%;width:411px;height:228px;margin:0 0 0 -235px ;z-index:1; visibility: hidden;\",\"AC Smart\")'\n          - 'status_code == 200'\n        condition: and\n# digest: 4a0a00473045022020ef03a0ebe338f3fe88a4476096825f1b18c781016ef0adb7964e6e0e1bb1d8022100ddfa4ff3603614bd22654ffb5c377590a258671e72deaf6783512df7fc234baf:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2025-10204"
}