This vulnerability in EZCast Pro II devices arises from the use of a predictable default Wi-Fi password in the Access Point mode prior to version 1.17478.177. Attackers can calculate the default password by leveraging observable device identifiers, enabling unauthorized access to the dongle. The weakness is due to insufficient randomness in password generation, categorized as CWE-330. The CVSS 4.0 score is 9.3 (critical), reflecting high impact and ease of exploitation without user interaction or privileges. The vulnerability affects version 1.17478.146 and earlier. No patch or official remediation guidance is currently available.

An attacker within Wi-Fi range can gain unauthorized access to the EZCast Pro II device by predicting the default Wi-Fi password. This compromises device confidentiality and integrity, potentially allowing control or misuse of the device. The vulnerability has a critical severity rating (CVSS 9.3), indicating a high risk of exploitation with significant impact on affected devices. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should avoid using vulnerable versions of EZCast Pro II devices in untrusted environments or disable the Access Point functionality if possible. Monitor vendor channels for updates and apply patches promptly once available.