Vulnerability in Ezcast Pro Ii

CVE-2025-13954

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

EPSS: 0.002 (5.8th percentile) — read the EPSS interpretation.

Affected products

Ezcast Pro Ii — versions 0, 1.17478.146

Weakness classification (CWE)

CWE-798 — Use of Hard-coded Credentials

References

vulnerability@ncsc.ch (government-resource)
vulnerability@ncsc.ch (release-notes)