CVE Feed

    Dashboard / CVE / CVE-2025-13954

    CVE-2025-13954

    Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

    Published:Dec 10, 2025
    Last Modified:May 28, 2026
    EPS:Dec 10, 2025
    EPSS Score:0.00024
    CVSS Score:9.3

    Affected Products

    Vendor
    Actions-micro
    Product
    Ezcast Pro Ii
    Vendor
    Actions-micro
    Product
    Ezcast Pro Ii Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-798 Use of Hard-coded Credentials

    Related CVEs

    CVE-2026-24348 (CVSS 7.4) — Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers…
    CVE-2026-24347 (CVSS 5.7) — Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate file…
    CVE-2026-24346 (CVSS 7.6) — Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to acc…
    CVE-2026-24345 (CVSS 6.8) — Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authori…
    CVE-2026-24344 (CVSS 7.3) — Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program …
    CVE-2025-13955 (CVSS 9.3) — Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 a…
    CVE-2019-12305 (CVSS 6.5) — In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High