Home

Description

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4907 and later

PUBLISHED Reserved 2025-03-12 | Published 2025-08-29 | Updated 2025-08-29 | Assigner qnap




HIGH: 7.1CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-770

Product status

Default status
unaffected

5.5.x before 5.5.6.4907
affected

Credits

coral finder

References

www.qnap.com/en/security-advisory/qsa-25-19

cve.org (CVE-2025-29899)

nvd.nist.gov (CVE-2025-29899)

Download JSON