An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can exploit the vulnerability to modify or corrupt memory. The vulnerability has been fixed in File Station 5 version 5.5.6.4933 and later.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-47206 |
Exploitation
To exploit this vulnerability, an attacker must first gain a user account on the affected system. Once access is obtained, the attacker can leverage the out-of-bounds write vulnerability to manipulate memory, potentially leading to unauthorized actions or system instability.
Affected Products
- File Station 5: A file management application that allows users to manage files on QNAP NAS devices.
Mitigation
Users are advised to update to File Station 5 version 5.5.6.4933 or later to mitigate the risk associated with this vulnerability. Regularly updating software and monitoring for security advisories can help protect against such vulnerabilities.