CVE-2025-13954CWE-798hardcoded-credentials

CVE-2025-13954

published December 10, 2025

CVSS

9.3

EPSS

Percentile

7.5

In the wild

Unconfirmed

What it is

Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI

The record

Technical detail

CVSS: 9.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00183 · 7.5th percentile
Weakness: CWE-798 · Use of Hard-coded Credentials
Published: 2025-12-10T14:15Z

References (2)

https://www.ncsc.admin.ch/ncsc/en/home/infos-fuer/infos-it-spezialisten/themen/schwachstelle-melden/cvd-cases/cvd-case-1-test.html · [email protected]https://www.nimbletech.com.tw/index.php/release-note/ · [email protected]

EPSS history

Timeline

10 DEC 08:29Z
Hard-coded cryptographic keys in EZCast Pro II Dongle
cvelistv5