CVE-2025-13955CWE-330

CVE-2025-13955

published December 10, 2025

CVSS

9.3

EPSS

Percentile

7.8

In the wild

Unconfirmed

What it is

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers

The record

Technical detail

CVSS: 9.3 · NONE
CVSS v4.0: Not supplied
EPSS: 0.00186 · 7.8th percentile
Weakness: CWE-330 · Use of Insufficiently Random Values
Published: 2025-12-10T14:15Z

References (2)

https://www.ncsc.admin.ch/ncsc/en/home/infos-fuer/infos-it-spezialisten/themen/schwachstelle-melden/cvd-cases/cvd-case-1-test.html · [email protected]https://www.nimbletech.com.tw/index.php/release-note/ · [email protected]

EPSS history

Timeline

10 DEC 08:30Z
Predictable Default Wi-Fi Password in EZCast Pro II Dongle
cvelistv5