EZCast vulnerabilities
We track 5 vulnerabilities in EZCast products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on January 27, 2026.
Latest EZCast vulnerabilities
- 9.1 Critical severity
EZCast Pro II: Use of Hard-coded Credentials
Use of well-known default credentials in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to access protected areas in the web application
- 8.8 High severity
EZCast Pro II: Cross-Site Request Forgery
Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI
- 7.3 High severity
EZCast Pro II: Buffer Copy without Checking Size of Input
Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution
- 9.3 Critical severity
EZCast Pro II: Use of Insufficiently Random Values
Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers
- 9.3 Critical severity
EZCast Pro II: Use of Hard-coded Credentials
Hard-coded cryptographic keys in Admin UI of EZCast Pro II before version 1.17478.177 allows attackers to bypass authorization checks and gain full access to the admin UI