Read the docs
TI-2025-12751 Aliases CVE-2025-13954GHSA-2qcw-cw26-gchc

Hard-coded cryptographic keys in EZCast Pro II Dongle

Priority MEDIUM 41CWE-798Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00181 7th percentileScored 2026-11-07
Fix Fixed EZCast Pro II (EZCast): 1.17478.177

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
EZCastEZCast Pro IIbefore 1.17478.1771.17478.177Patch availableCNA
  • EZCast Pro II VendorEZCast Affected before 1.17478.177 Fixed in 1.17478.177 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:o:nimbletech:ezcast_pro_dongle_ii_firmware:*:*:*:*:*:*:*:*——EZCast
  • cpe:2.3:o:nimbletech:ezcast_pro_dongle_ii_firmware:*:*:*:*:*:*:*:* Versions — — ·EZCast

Remediation

  • Fix · CNA EZCast Pro II (EZCast) Fixed in 1.17478.177

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    EZCast Pro II 1.17478.177

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2025-12752 Predictable Default Wi-Fi Password in EZCast Pro II DonglePriority MEDIUM 41
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-13954
  2. 2026-10-03 Alias added: GHSA-2qcw-cw26-gchc

References

Other 2

  • TI-2025-12752 Predictable Default Wi-Fi Password in EZCast Pro II Dongle CVSS 4.0CRITICAL 9.3
  • TI-2026-19619 Use of well-known default credentials in EZCast Pro II Dongle CVSS 4.0HIGH 7.6
  • TI-2026-19621 Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle CVSS 4.0HIGH 7.4
  • TI-2026-19617 Multiple Buffer Overflows in EZCast Pro II Dongle CVSS 4.0HIGH 7.3
  • TI-2026-19618 Cross-Site Request Forgery in EZCast Pro II Dongle CVSS 4.0MEDIUM 6.8
  • TI-2026-19620 Arbitrary file write to /tmp directory in EZCast Pro II Dongle CVSS 4.0MEDIUM 5.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences