Findings

CVE-2025-13954

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

Published Dec 10, 2025 · updated Oct 14, 2026

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

Timeline

Detection, updates, and resolution for this record.

  1. Dec 10, 2025 · NIST NVD

    Detected

    Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

  2. Oct 14, 2026 · NIST NVD

    Updated

    Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

Sources

  • CVE.orgCVE-2025-13954

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2025-13954

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDCVE-2025-13954

    Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

    nvd.nist.gov

References

CVE-2025-13954 · ZeroDay Findings