Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: EZCast Clear all filters
TI-2026-19621 CVE-2026-24348 · GHSA-rq8q-2gpw-5fr2

Multiple cross-site scripting vulnerabilities in EZCast Pro II Dongle

Priority LOW 34

Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to execute arbitrary JavaScript code in the browser of other Admin UI users.

CVSS 4.0HIGH 7.4 Adjacent network No auth User interaction EPSS 0.00169 Published 2026-01-27 No fix listed CWE-20
TI-2026-19620 CVE-2026-24347 · GHSA-45hq-rq49-xwcf

Arbitrary file write to /tmp directory in EZCast Pro II Dongle

Priority LOW 25

Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate files in the /tmp directory

CVSS 4.0MEDIUM 5.7 Adjacent network High privileges No interaction EPSS 0.002 Published 2026-01-27 No fix listed CWE-20
TI-2026-19619 CVE-2026-24346 · GHSA-cq4v-33m4-7gj5

Use of well-known default credentials in EZCast Pro II Dongle

Priority LOW 35

Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application

CVSS 4.0HIGH 7.6 Adjacent network No auth No interaction EPSS 0.00256 Published 2026-01-27 No fix listed CWE-798
TI-2026-19618 CVE-2026-24345 · GHSA-cr4v-m7hf-7hvj

Cross-Site Request Forgery in EZCast Pro II Dongle

Priority LOW 31

Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI

CVSS 4.0MEDIUM 6.8 Adjacent network High privileges User interaction EPSS 0.00163 Published 2026-01-27 No fix listed CWE-20
TI-2026-19617 CVE-2026-24344 · GHSA-6pg2-g9vc-4g7p

Multiple Buffer Overflows in EZCast Pro II Dongle

Priority LOW 33

Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution

CVSS 4.0HIGH 7.3 Adjacent network High privileges No interaction EPSS 0.00209 Published 2026-01-27 No fix listed CWE-120
TI-2025-12752 CVE-2025-13955 · GHSA-5wg5-mf39-8mh8

Predictable Default Wi-Fi Password in EZCast Pro II Dongle

Priority MEDIUM 41

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observabl…

CVSS 4.0CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00185 Published 2025-12-10 Fixed in 1.17478.177 CWE-330
TI-2025-12751 CVE-2025-13954 · GHSA-2qcw-cw26-gchc

Hard-coded cryptographic keys in EZCast Pro II Dongle

Priority MEDIUM 41

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

CVSS 4.0CRITICAL 9.3 Adjacent network No auth No interaction EPSS 0.00181 Published 2025-12-10 Fixed in 1.17478.177 CWE-798