PT-2025-24308 · Synology · File Station

Coral · Published 2025-06-06 · Updated 2025-09-17 · CVE-2025-33035

Positive Technologies (AI Summary)

CVSS v4.0

7.2

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions File Station 5 versions prior to 5.5.6.4847

Description A path traversal issue has been reported, allowing a remote attacker with a user account to read the contents of unexpected files or system data.

Recommendations For versions prior to 5.5.6.4847, update to version 5.5.6.4847 or later to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-33035

Affected Products

File Station

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-33035 · Security Note
• https://osv.dev/vulnerability/CVE-2025-33035 · Vendor Advisory
• https://qnap.com/en/security-advisory/qsa-25-16 · Vendor Advisory
• https://t.me/cveNotify/135695 · Telegram Post
• https://twitter.com/CVEnew/status/1931037261711155677 · Twitter Post
• https://t.me/cvetracker/25649 · Telegram Post