Vulnerability · Published Oct 16, 2025 · Assigned by VulnCheck

CVE-2025-34254D-Link Nuclias Connect <= v1.3.1.4 Login Account Enumeration

Medium 6.9

In plain English

A medium-severity security flaw in Nuclias Connect from D-Link. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)1.0%top 36.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

D-Link Nuclias Connect firmware versions <= 1.3.1.4 contain an observable response discrepancy vulnerability. The application's 'Login' endpoint returns distinct JSON responses depending on whether the supplied username is associated with an existing account. Because the responses differ in the `error.message`string value, an unauthenticated remote attacker can enumerate valid usernames/accounts on the server. NOTE: D-Link states that a fix is under development.

Affected products (as reported)

Vendor	Product	Versions
D-Link	Nuclias Connect	0 – through 1.3.1.4

Weakness: CWE-204 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

References

https://www.vulncheck.com/advisories/dlink-nuclias-connect-login-account-enumeration third-party-advisory
https://www.dlink.com/en/for-business/nuclias/nuclias-connect product
https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10472 vendor-advisory