EZCast Pro II Dongle Hard-Coded Cryptographic Keys Authorization Bypass Vulnerability

A vulnerability exists in the Admin UI of EZCast Pro II version 1.17478.146 due to hard-coded cryptographic keys. This flaw allows attackers to bypass authorization checks and gain full access to the admin interface.

Impact

Exploitation of this vulnerability allows for unauthorized access to the admin UI, bypassing all authorization checks.

Remediation

Users are advised to disconnect the dongle from their local network and limit its use to Access Point functionality until a firmware patch is available. Additionally, change the default password.