CVE-2026-24345

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-24345", "assignerOrgId": "455daabc-a392-441d-aa46-37d35189897c", "state": "PUBLISHED", "assignerShortName": "NCSC.ch", "dateReserved": "2026-01-22T12:55:22.578Z", "datePublished": "2026-01-27T09:13:27.664Z", "dateUpdated": "2026-01-27T15:22:21.306Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "EZCast Pro II", "vendor": "EZCast", "versions": [{"status": "affected", "version": "1.17478.146"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Swiss National Test Institute for Cybersecurity NTC"}, {"lang": "en", "type": "finder", "value": "Redguard AG"}, {"lang": "en", "type": "coordinator", "value": "Swiss National Cybersecurity Centre"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI"}], "value": "Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI"}], "impacts": [{"capecId": "CAPEC-62", "descriptions": [{"lang": "en", "value": "CAPEC-62 Cross Site Request Forgery"}]}], "metrics": [{"cvssV4_0": {"Automatable": "YES", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "baseScore": 6.8, "baseSeverity": "MEDIUM", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:Y/RE:L", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "LOW"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "455daabc-a392-441d-aa46-37d35189897c", "shortName": "NCSC.ch", "dateUpdated": "2026-01-27T09:13:27.664Z"}, "references": [{"url": "https://hub.ntc.swiss/ntcf-2025-32832"}], "source": {"discovery": "UNKNOWN"}, "title": "Cross-Site Request Forgery in EZCast Pro II Dongle", "workarounds": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Until a firmware patch is made available by the vendor, users are advised to disconnect the dongle from their local network and limit its use strictly to Access Point functionality to minimize the attack surface."}], "value": "Until a firmware patch is made available by the vendor, users are advised to disconnect the dongle from their local network and limit its use strictly to Access Point functionality to minimize the attack surface."}], "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-27T15:22:11.847821Z", "id": "CVE-2026-24345", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-27T15:22:21.306Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-24345", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-27T15:22:11.847821Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-27T15:22:17.937Z"}}], "cna": {"title": "Cross-Site Request Forgery in EZCast Pro II Dongle", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Swiss National Test Institute for Cybersecurity NTC"}, {"lang": "en", "type": "finder", "value": "Redguard AG"}, {"lang": "en", "type": "coordinator", "value": "Swiss National Cybersecurity Centre"}], "impacts": [{"capecId": "CAPEC-62", "descriptions": [{"lang": "en", "value": "CAPEC-62 Cross Site Request Forgery"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.8, "Automatable": "YES", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/AU:Y/RE:L", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "EZCast", "product": "EZCast Pro II", "versions": [{"status": "affected", "version": "1.17478.146"}], "defaultStatus": "affected"}], "references": [{"url": "https://hub.ntc.swiss/ntcf-2025-32832"}], "workarounds": [{"lang": "en", "value": "Until a firmware patch is made available by the vendor, users are advised to disconnect the dongle from their local network and limit its use strictly to Access Point functionality to minimize the attack surface.", "supportingMedia": [{"type": "text/html", "value": "Until a firmware patch is made available by the vendor, users are advised to disconnect the dongle from their local network and limit its use strictly to Access Point functionality to minimize the attack surface.", "base64": false}]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI", "supportingMedia": [{"type": "text/html", "value": "Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "455daabc-a392-441d-aa46-37d35189897c", "shortName": "NCSC.ch", "dateUpdated": "2026-01-27T09:13:27.664Z"}}}, "cveMetadata": {"cveId": "CVE-2026-24345", "state": "PUBLISHED", "dateUpdated": "2026-01-27T15:22:21.306Z", "dateReserved": "2026-01-22T12:55:22.578Z", "assignerOrgId": "455daabc-a392-441d-aa46-37d35189897c", "datePublished": "2026-01-27T09:13:27.664Z", "assignerShortName": "NCSC.ch"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "EZCast Pro II", "vendor": "EZCast", "versions": [{"status": "affected", "version": "1.17478.146"}]}], "source": "vulnerability@ncsc.ch"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:nimbletech:ezcast_pro_dongle_ii_firmware:1.17478.146:*:*:*:*:*:*:*", "matchCriteriaId": "D9C1B80A-D748-40B9-B2FB-476107B3D705", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:nimbletech:ezcast_pro_dongle_ii:-:*:*:*:*:*:*:*", "matchCriteriaId": "0621F0E0-6ABB-46E2-8E85-22C8695ACE87", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cross-Site Request Forgery in Admin UI of EZCast Pro II version 1.17478.146 allows attackers to bypass authorization checks and gain full access to the admin UI"}, {"lang": "es", "value": "Falsificaci\u00f3n de petici\u00f3n en sitios cruzados en la interfaz de usuario de administraci\u00f3n de EZCast Pro II versi\u00f3n 1.17478.146 permite a los atacantes eludir las comprobaciones de autorizaci\u00f3n y obtener acceso total a la interfaz de usuario de administraci\u00f3n."}], "id": "CVE-2026-24345", "lastModified": "2026-06-17T10:22:55.373", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "YES", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.8, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "HIGH", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:L/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "LOW"}, "source": "vulnerability@ncsc.ch", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-24345", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-01-27T15:22:11.847821Z", "version": "2.0.3"}}]}, "published": "2026-01-27T10:15:48.937", "references": [{"source": "vulnerability@ncsc.ch", "tags": ["Third Party Advisory"], "url": "https://hub.ntc.swiss/ntcf-2025-32832"}], "sourceIdentifier": "vulnerability@ncsc.ch", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "vulnerability@ncsc.ch", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-352"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T02:16:53.425395+00:00", "value": {"mitigation_remediation": ["Upgrade to the latest firmware from Nimbletech that removes the CSRF issue.", "If no patch is available, disconnect the dongle from the local network and use it solely as an Access Point to reduce exposure.", "Restrict admin UI access to trusted IP addresses and enforce stronger authentication controls."], "summary": {"action": "Patch Now", "impact": "Privilege Escalation"}, "threat_synthesis": {"affected_systems": "Affected systems include Nimbletech EZCast Pro\u202fII wireless dongles running firmware\u202f1.17478.146. This applies to the hardware dongle as well as the boxed product that contains the same firmware. No other firmware versions are listed as affected in the CNA data, so the risk is confined to devices that have not yet been updated beyond version\u202f1.17478.146.", "description_and_impact": "A cross\u2011site request forgery flaw in the admin UI of EZCast Pro\u202fII dongle firmware version\u202f1.17478.146 allows an attacker to bypass authorization checks and gain full access to the administrative interface. The vulnerability is exploited by tricking a browser that has authenticated to the device into submitting privileged requests, thereby providing the attacker with the same level of control as a legitimate administrator. The impact is the ability to modify device settings, add or remove remote endpoints, and potentially change firmware or network configuration, compromising the integrity and availability of the device.", "risk_and_exploitability": "The CVSS score of 6.8 classifies this flaw as a moderate severity vulnerability with a moderate impact and the risk of exploitation depends on the device\u2019s exposure. The EPSS score of less than\u202f1\u202f% indicates a very low likelihood of real-world exploitation, and the vulnerability is not currently listed in the CISA KEV catalog, further reducing the urgency of immediate action for most environments. The likely attack vector is an on\u2011network or via a local administrator\u2019s browser; an attacker would need to persuade or trick the admin user to perform a request while authenticated, or otherwise leverage an existing authenticated session. Because CSRF controls are missing, the attacker can submit arbitrary administrative requests without re\u2011authentication."}}}}, "created": "2026-01-27T20:17:16.852599+00:00", "updated": "2026-04-18T02:30:15.858810+00:00", "vendors": ["actions-micro", "actions-micro$PRODUCT$ezcast_pro_ii", "actions-micro$PRODUCT$ezcast_pro_ii_firmware"]}