Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

File Station 5: Denial-of-Service Attack via User Account

CVE-2025-29877 · published 1 year ago
Summary

A security issue in File Station 5 allows an attacker with a user account to crash the service, making it unavailable to others. This only affects users who have not updated to the latest version of File Station. To stay secure, update to File Station 5 5.5.6.4847 or later.

What to do
  • Update qnap file_station to version 5.5.6.4847 or later.
Affected software
VendorProductAffected versions
qnap file_station >= 5.5.6.4691, < 5.5.6.4847
cpe:2.3:a:qnap:file_station:*:*:*:*:*:*:*:*
Original advisory text
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-servic...
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.4847 and later
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-476NULL Pointer Dereference
Timeline
Published6 Jun 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-29877 · NVD
Track software like this
Free during beta