MEDIUM
File Station 5
Published Mar 7, 2025
5.3
MEDIUMCVSS 4.0
EPSS 0.49%
Description
A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers to read/write files or directories.
We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4741 and later
Affected products
-
- Version 5.5.xStatusaffectedConstraints<5.5.6.4741
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| QNAP Systems Inc. | File Station 5 | unaffected |
|
- ≥ 5.5.6.4691 · < 5.5.6.4741
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4741 and later
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-54218 Advisory
- https://www.qnap.com/en/security-advisory/qsa-24-55 Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-54218 | Advisory | |
| https://www.qnap.com/en/security-advisory/qsa-24-55 | Vendor Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner qnap
Published Mar 7, 2025
Updated Mar 7, 2025
Reserved Oct 9, 2024
Link CVE-2024-48864
CISA Vulnrichment
Updated Mar 7, 2025
ENISA EUVD
EUVD-2024-54218 Assigner qnap
Published Mar 7, 2025
Updated Mar 7, 2025
Exploited since n/a
Link EUVD-2024-54218