EZCast Pro II Improper Input Validation Vulnerability Allowing File Manipulation in Temporary Directory

A vulnerability exists in the Admin UI of EZCast Pro II version 1.17478.146, where improper input validation allows attackers to manipulate files in the /tmp directory. This issue affects all versions of the EZCast Pro II Dongle from NimbleTech.

Impact

Exploitation of this vulnerability could lead to unauthorized file manipulation in the temporary directory, potentially allowing for further exploitation or disruption of the device's functionality.

Remediation

Users are advised to disconnect the dongle from the local network, limit usage to access point functionality, and change the default password. The National Cyber Security Centre NCSC has issued a warning regarding this vulnerability, advising users to take these immediate actions until a firmware patch is available.