CVE-2025-66954

n/a / n/a PUBLISHED

Description (CNA)

A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/DBmonster19/CVE-2025-66954

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.