CVE-2025-66954

MEDIUM

Buffalo Link Station 1.85-0.01 - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-66954. PoCs published by DBmonster19.

AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2025-66954, an IDOR vulnerability in Buffalo LinkStation firmware version 1.85-0.01. It includes CVSS scoring, impact assessment, and mitigation recommendations, but the actual PoC is redacted.

Description

A vulnerability exists in the Buffalo Link Station version 1.85-0.01 that allows unauthenticated or guest-level users to enumerate valid usernames and their associated privilege roles. The issue is triggered by modifying a parameter within requests sent to the /nasapi endpoint.

Exploits (1)

nomisec WRITEUP
by DBmonster19 · poc
https://github.com/DBmonster19/CVE-2025-66954

This repository provides a detailed technical analysis of CVE-2025-66954, an IDOR vulnerability in Buffalo LinkStation firmware version 1.85-0.01. It includes CVSS scoring, impact assessment, and mitigation recommendations, but the actual PoC is redacted.

Classification
Writeup 95%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Buffalo LinkStation firmware version 1.85-0.01
No auth needed
Prerequisites: guest-level access to the device
devstral-2 · analyzed May 03, 2026 Full analysis →

References (1)

Core 1

Scores

CVSS v3 6.5
EPSS 0.0032
EPSS Percentile 23.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-639
Status published
Published Apr 20, 2026
Tracked Since Apr 20, 2026