PT-2025-37410 · Unknown · Ac Smart Ii

Published 2025-09-14 · Updated 2025-11-29 · CVE-2025-10204

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions AC Smart II (affected versions not specified)

Description A vulnerability exists in AC Smart II that allows unauthorized password changes. A hidden form for resetting the administrator password is present on a page, which can be manipulated using developer tools to display and utilize the form. This form permits modification of the administrator password without requiring login verification or proper user permissions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-10204

Affected Products

Ac Smart Ii

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-10204 · Security Note
• https://lgsecurity.lge.com/bulletins · Vendor Advisory
• https://twitter.com/pdnuclei_bot/status/1994713165565923356 · Twitter Post
• https://twitter.com/CVEnew/status/1967216221163577757 · Twitter Post
• https://t.me/CVEtracker/32449 · Telegram Post
• https://t.me/cveNotify/135402 · Telegram Post