PT-2025-10101 · Synology · File Station

Exluck · Published 2025-03-07 · Updated 2025-03-08 · CVE-2024-48864

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions File Station 5 versions prior to 5.5.6.4741

Description A vulnerability has been reported that affects files or directories accessible to external parties. If exploited, it could allow remote attackers to read or write files or directories.

Recommendations For versions prior to 5.5.6.4741, update to version 5.5.6.4741 or later to resolve the issue.

Fix

Files Accessible to External Parties

Weakness Enumeration

CWE-552

Related Identifiers

CVE-2024-48864

Affected Products

File Station

References · 6

• https://osv.dev/vulnerability/CVE-2024-48864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-48864 · Security Note
• https://qnap.com/en/security-advisory/qsa-24-55 · Vendor Advisory
• https://t.me/cvetracker/18689 · Telegram Post
• https://twitter.com/CVEnew/status/1898246359846715616 · Twitter Post
• https://t.me/cvedetector/19857 · Telegram Post