Vulnerability Description
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791 and later and later
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qnap | File Station | >= 5.5.6.4691, < 5.5.6.4791 |
Related Weaknesses (CWE)
References
- https://www.qnap.com/en/security-advisory/qsa-25-09Vendor Advisory
FAQ
What is CVE-2025-29885?
CVE-2025-29885 is a vulnerability with a CVSS score of 8.8 (HIGH). An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the ...
How severe is CVE-2025-29885?
CVE-2025-29885 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-29885?
Check the references section above for vendor advisories and patch information. Affected products include: Qnap File Station.