{"id":"CVE-2026-24344","state":"PUBLISHED","title":"Multiple Buffer Overflows in EZCast Pro II Dongle","description":"Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution","publishedAt":"2026-01-27T09:04:34.750Z","updatedAt":"2026-01-27T14:25:06.534Z","severity":{"score":7.3,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U","source":"NCSC.ch"},"assigner":"NCSC.ch","products":["EZCast EZCast Pro II"],"affected":[{"vendor":"EZCast","product":"EZCast Pro II","defaultStatus":"affected","versions":[{"version":"1.17478.146","status":"affected"}]}],"references":["https://hub.ntc.swiss/ntcf-2025-68873"],"weaknesses":["CWE-120"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/24xxx/CVE-2026-24344.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-24344","state":"PUBLISHED","datePublished":"2026-01-27T09:04:34.750Z","dateUpdated":"2026-01-27T14:25:06.534Z","assignerShortName":"NCSC.ch","assignerOrgId":"455daabc-a392-441d-aa46-37d35189897c","dateReserved":"2026-01-22T12:55:22.577Z"},"containers":{"cna":{"title":"Multiple Buffer Overflows in EZCast Pro II Dongle","descriptions":[{"lang":"en","value":"Multiple Buffer Overflows in Admin UI of EZCast Pro II version 1.17478.146 allow attackers to cause a program crash and potential remote code execution"}],"affected":[{"vendor":"EZCast","product":"EZCast Pro II","defaultStatus":"affected","versions":[{"version":"1.17478.146","status":"affected"}]}],"references":[{"url":"https://hub.ntc.swiss/ntcf-2025-68873"}],"metrics":[{"cvssV4_0":{"Automatable":"NO","Recovery":"USER","Safety":"NOT_DEFINED","attackComplexity":"HIGH","attackRequirements":"NONE","attackVector":"ADJACENT","baseScore":7.3,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"HIGH","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:A/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:N/R:U","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","description":"CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"NCSC.ch","orgId":"455daabc-a392-441d-aa46-37d35189897c","dateUpdated":"2026-01-27T09:04:34.750Z"},"credits":[{"lang":"en","type":"finder","value":"Swiss National Test Institute for Cybersecurity NTC"},{"lang":"en","type":"coordinator","value":"Swiss National Cybersecurity Centre"}],"impacts":[{"capecId":"CAPEC-253","descriptions":[{"lang":"en","value":"CAPEC-253 Remote Code Inclusion"}]},{"capecId":"CAPEC-100","descriptions":[{"lang":"en","value":"CAPEC-100 Overflow Buffers"}]}],"source":{"discovery":"UNKNOWN"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Until a firmware patch is made available by the vendor, users are advised to disconnect the dongle from their local network and limit its use strictly to Access Point functionality to minimize the attack surface."}],"value":"Until a firmware patch is made available by the vendor, users are advised to disconnect the dongle from their local network and limit its use strictly to Access Point functionality to minimize the attack surface."}],"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-01-27T14:24:24.341887Z","id":"CVE-2026-24344","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-01-27T14:25:06.534Z"}}]}}}