Improper input validation in the Admin UI of EZCast Pro II allows an attacker to manipulate files within the /tmp directory. This flaw is represented by CWE‑20 Input Validation errors. The vulnerability could enable an attacker to create or overwrite files in a temporary location, potentially affecting configuration or execution of subsequent processes. The CVSS score of 5.7 indicates moderate severity, with no indication of remote code execution from the provided description.

The affected system is the EZCast Pro II dongle, specifically firmware version 1.17478.146. No other versions are listed as affected in the input.

The CVSS score of 5.7 combined with an EPSS score of less than 1% suggests the risk is moderate but the exploitation probability is low. The vulnerability is not listed in the KEV catalog. The likely attack vector is through the Admin UI interface, which may be reachable over the local network or exposed externally – this is inferred from the description of an Admin UI issue. No additional exploitation conditions are provided in the data.