CVE-2025-22490

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-29876

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-29873

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-22490

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-29885 File Station 5

An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File...

CVE-2025-29885

CVE-2025-29885 refers to an improper certificate validation vulnerability affecting QNAP File Station 5 . The issue allows remote attackers who already have user access to potentially compromise system security. Technical details in the connected PT-2025-24304 entry specify affected versions: Fil...

CVE-2025-22486

CVE-2025-22486 involves an improper certificate validation vulnerability in QNAP File Station 5 . The issue arises from trust management/certificate validation flaws, affecting versions prior to 5.5.6.4791 . Successful exploitation could allow remote attackers who already have user access to comp...

CVE-2025-22490 File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-22490

CVE-2025-22490 affects QNAP File Station 5. Affected component: File Station 5 (versions prior to 5.5.6.4847). Root cause: NULL pointer dereference. Consequence: remote attacker who has a user account can trigger a denial-of-service (DoS) condition. Mitigation: update to File Station 5 5.5.6.4847...

CVE-2025-29871 File Station 5

An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later...

CVE-2025-29872

The CVE-2025-29872 vulnerability affects QNAP File Station 5, describing an allocation of resources without limits or throttling that can lead to resource exhaustion. A remote attacker with a user account can exploit this issue to prevent other systems, applications, or processes from accessing t...

CVE-2025-29877 File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-29877

CVE-2025-29877 affects QNAP File Station 5. The issue is a NULL pointer dereference in File Station 5 (remote user with an account can trigger a DoS). A fix is available in File Station 5 version 5.5.6.4847 and later. Multiple sources (NVD, Red Hat, CNVD, CVE lists) describe the vulnerability as ...

PT-2025-24306 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: An improper certificate validation issue has been reported, allowing a remote attacker with a user account to compromise the system's security. Recommendations: For versions prior to...

PT-2025-24308 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: A path traversal issue has been reported, allowing a remote attacker with a user account to read the contents of unexpected files or system data. Recommendations: For versions prior to...

PT-2025-24304 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4791 Description: An improper certificate validation issue has been reported, potentially allowing remote attackers with user access to compromise system security. Recommendations: For versions prior to...

PT-2025-24294 · Synology · File Station

Name of the Vulnerable Software and Affected Versions: File Station 5 versions prior to 5.5.6.4847 Description: An allocation of resources without limits or throttling issue has been reported. If a remote attacker gains a user account, they can exploit this issue to prevent other systems,...

QNAP File Station 5 信任管理问题漏洞

QNAP File Station 5 is a file management system launched by Weilian Technology, which is mainly used for file management of NAS devices. A trust management issue vulnerability exists in QNAP File Station 5, which stems from improper certificate validation, and can be exploited by an attacker to...

PT-2024-9665 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-10 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting attacks. Remote authenticated users with...

CVE-2020-2503

If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed these issues in QES 2.1.1 Build 20201006 and later...