PT-2025-24298 · Synology · File Station

Coral · Published 2025-06-06 · Updated 2025-06-06 · CVE-2025-29872

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions File Station 5 versions prior to 5.5.6.4847

Description An allocation of resources without limits or throttling issue has been reported. If a remote attacker gains a user account, they can exploit this issue to prevent other systems, applications, or processes from accessing the same type of resource.

Recommendations For versions prior to 5.5.6.4847, update to version 5.5.6.4847 or later to resolve the issue.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-29872

Affected Products

File Station

References · 5

• https://osv.dev/vulnerability/CVE-2025-29872 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-29872 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-16 · Vendor Advisory
• https://twitter.com/CVEnew/status/1931037256011165770 · Twitter Post
• https://t.me/cvetracker/25639 · Telegram Post