Read the docs

EZCast

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

EZCast records in CISA KEV

No EZCast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ezcast Pro Dongle Ii Firmware 4 records LOW

Records

7 records

TI-2025-12752 CVE-2025-13955 · GHSA-5wg5-mf39-8mh8

Predictable Default Wi-Fi Password in EZCast Pro II Dongle

Priority MEDIUM 41

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observabl…

CVSS 4.0CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00185 Published 2025-12-10 Fixed in 1.17478.177 CWE-330
TI-2025-12751 CVE-2025-13954 · GHSA-2qcw-cw26-gchc

Hard-coded cryptographic keys in EZCast Pro II Dongle

Priority MEDIUM 41

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

CVSS 4.0CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00181 Published 2025-12-10 Fixed in 1.17478.177 CWE-798
TI-2026-19619 CVE-2026-24346 · GHSA-cq4v-33m4-7gj5

Use of well-known default credentials in EZCast Pro II Dongle

Priority LOW 35

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application

CVSS 4.0HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00256 Published 2026-01-27 No fix listed CWE-798
TI-2026-19621 CVE-2026-24348 · GHSA-rq8q-2gpw-5fr2

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle

Priority LOW 34

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

CVSS 4.0HIGH 7.4 Adjacent network No auth User interaction EPSS 0.00169 Published 2026-01-27 No fix listed CWE-20
TI-2026-19617 CVE-2026-24344 · GHSA-6pg2-g9vc-4g7p

Multiple Buffer Overflows in EZCast Pro II Dongle

Priority LOW 33

Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00209 Published 2026-01-27 No fix listed CWE-120
TI-2026-19618 CVE-2026-24345 · GHSA-cr4v-m7hf-7hvj

Cross-Site Request Forgery in EZCast Pro II Dongle

Priority LOW 31

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges User interaction EPSS 0.00163 Published 2026-01-27 No fix listed CWE-20
TI-2026-19620 CVE-2026-24347 · GHSA-45hq-rq49-xwcf

Arbitrary file write to /tmp directory in EZCast Pro II Dongle

Priority LOW 25

Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory

CVSS 4.0MEDIUM 5.7 Adjacent network High privileges No interaction EPSS 0.002 Published 2026-01-27 No fix listed CWE-20
Open these records in search →