Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in QNAP NAS File Station 5 ausnutzen, um einen Denial of Service Angriff durchzuführen oder beliebigen Code auszuführen.
Product
QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.
Vulnerabilities 2
-
High 7.1
File Station 5
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the …
-
High 7.1
File Station 5
An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: …
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-25777
-
#1
Initiale Fassung
References
-
QNAP Security Advisory QSA-25-31 vom 2025-08-25
https://www.qnap.com/de-de/security-advisory/QSA-25-31