CVE-2025-29890CWE-770denial-of-service

CVE-2025-29890

Medium · published August 29, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.

We have already fixed the vulnerability in the following version:

File Station 5 5.5.6.4907 and later

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.8th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-08-29T22:15Z
Affected products (1)
ProductVersionsFixed in
qnap/file_station≥ 5.5.6.4691, < 5.5.6.49075.5.6.4907
References (1)
EPSS history
Timeline
  • 29 AUG 17:14Z
    File Station 5
    cvelistv5