CVE-2025-62854

Summary

An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5190 and later

Affected Software

VendorProductVersion RangeStatus
QNAP Systems Inc.File Station 55.5.x < 5.5.6.5190affected

Weaknesses

  • CWE-400: CWE-400

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References