An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can exploit the vulnerability to modify or corrupt memory. The vulnerability has been fixed in File Station 5 version 5.5.6.4933 and later.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2025-47206 |
Exploitation
To exploit this vulnerability, an attacker must first gain a user account on the affected File Station 5. Once access is obtained, the attacker can perform actions that lead to out-of-bounds writes, potentially allowing them to modify or corrupt memory, which could lead to further exploitation or denial of service.
Affected Products
- File Station 5: A file management application that allows users to manage files on QNAP NAS devices. The vulnerability affects versions prior to 5.5.6.4933.
Mitigation
Users are advised to update their File Station 5 to version 5.5.6.4933 or later to mitigate the risk associated with this vulnerability. Regularly updating software and monitoring for security advisories can help protect against potential exploits.