This vulnerability (CVE-2025-13954) affects EZCast Pro II devices running versions prior to 1.17478.177. The issue is due to hard-coded cryptographic keys embedded in the Admin UI, which can be leveraged by attackers to bypass authorization mechanisms. This results in unauthorized full access to the administrative interface, potentially allowing complete control over the device. The CVSS 4.0 vector indicates the attack requires adjacent network access but no privileges or user interaction, with high impact on all security objectives.

Successful exploitation allows attackers to bypass authorization checks and gain full administrative access to the EZCast Pro II device's Admin UI. This compromises confidentiality, integrity, and availability of the device and its management functions. The vulnerability is rated critical with a CVSS 4.0 score of 9.3, reflecting the severe risk posed by unauthorized control over the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor EZCast's official channels for updates. Until a fix is available, restricting network access to the Admin UI and employing network segmentation may reduce exposure, but these are general mitigations and not a substitute for an official patch.