CVE
CVE-2025-10204
7.1
CVSShigh
Exploitable from an adjacent network · no authentication required.
Description
A vulnerability has been discovered in AC Smart II where passwords can be changed without authorization. This page contains a hidden form for resetting the administrator password. The attacker can manipulate the page using developer tools to display and use the form. This form allows you to change the administrator password without verifying login status or user permissions.
Attack Vector
Adjacent
Privileges Req.
None
User Interaction
None
ac smart ii
Updated Nov 7, 2026View on NVD →
This CVE is in S4E's catalog, but no public scanner is mapped to it yet.
CVE history: ac smart ii
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →