CVE Feed

    Dashboard / CVE / CVE-2025-13955

    CVE-2025-13955

    Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers

    Published:Dec 10, 2025
    Last Modified:May 28, 2026
    EPS:Dec 10, 2025
    EPSS Score:0.00025
    CVSS Score:9.3

    Affected Products

    Vendor
    Actions-micro
    Product
    Ezcast Pro Ii
    Vendor
    Actions-micro
    Product
    Ezcast Pro Ii Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-24348 (CVSS 7.4) — Multiple cross-site scripting vulnerabilities in Admin UI of EZCast Pro II version 1.17478.146 allow attackers…
    CVE-2026-24347 (CVSS 5.7) — Improper input validation in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to manipulate file…
    CVE-2026-24346 (CVSS 7.6) — Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to acc…
    CVE-2026-24345 (CVSS 6.8) — Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authori…
    CVE-2026-24344 (CVSS 7.3) — Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program …
    CVE-2025-13954 (CVSS 9.3) — Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypa…
    CVE-2019-12305 (CVSS 6.5) — In EZCast Pro II, the administrator password md5 hash is provided upon a web request. This hash can be cracked…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High