CVE-2025-10204 PoC — LG Electronics AC Smart II 安全漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10204.yaml

Associated Vulnerability

Title:LG Electronics AC Smart II 安全漏洞 (CVE-2025-10204)
Description:LG Electronics AC Smart II是韩国LG Electronics公司的一款空调中央集中控制器。 LG Electronics AC Smart II存在安全漏洞，该漏洞源于隐藏表单允许未经授权更改管理员密码，可能导致权限提升。

Description

AC Smart II contains an authentication bypass caused by a hidden password reset form that can be manipulated to change the administrator password without verifying login or permissions, letting attackers change admin passwords without authorization.

File Snapshot


 id: CVE-2025-10204

info:
  name: AC Smart II - Authentication Bypass
  author: theeldruin
  severit

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!