CVE-2024-48864

Summary

A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers to read/write files or directories.

We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4741 and later

Affected Software

VendorProductVersion RangeStatus
QNAP Systems Inc.File Station 55.5.x < 5.5.6.4741affected

Weaknesses

  • CWE-552: CWE-552

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References