PT-2025-24294 · Synology · File Station

Coral · Published 2025-06-06 · Updated 2025-06-06 · CVE-2025-22484

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions File Station 5 versions prior to 5.5.6.4847

Description An allocation of resources without limits or throttling issue has been reported. If a remote attacker gains a user account, they can exploit this issue to prevent other systems, applications, or processes from accessing the same type of resource.

Recommendations For versions prior to 5.5.6.4847, update to version 5.5.6.4847 or later to resolve the issue.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-22484

Affected Products

File Station

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-22484 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-16 · Note
• https://twitter.com/CVEnew/status/1931037253192630629 · Twitter Post