CVE-2025-13955

Critical

Description

Predictable default Wi-Fi Password in Access Point functionality in EZCast Pro II before version 1.17478.177 allows attackers in Wi-Fi range to gain access to the dongle by calculating the default password from observable device identifiers

SeverityCritical

CVSS9.3

Exploit probability—

ProductEZCast Pro II

PublishedDec 10, 2025

First seenDec 10, 2025

Weakness typeCWE-330CWE-330

How to fix

Update

EZCast EZCast Pro II1.17478.177 or later

Vendor advisories

nimbletech.com.tw/index.php/release-note/

Affected products

Product	Affected versions	Fixed in
EZCast EZCast Pro II	v < 1.17478.177	1.17478.177

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.