by Kastro
Paper/Archive/CVE-2025-13954

CVE-2025-13954

EZCast EZCast Pro II — Hard-coded cryptographic keys in EZCast Pro II Dongle

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
29
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 7.7.077 × 201.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

Affected

ProductAffectedFixed inSource
EZCast Pro II< 1.17478.1771.17478.177CNA

Scores by source

NCSC.ch (CNA)9.3CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:N/AU:Y/RE:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refncsc.admin.ch/ncsc/en/home/infos-fuer/infos-it-spezialisten/themen/schwachstelle-melden/cvd-cases/cvd-case-1-test.htmlrefnimbletech.com.tw/index.php/release-note