PT-2025-35293 · Qnap · Viostor

Hou Liuyang · Published 2025-08-29 · Updated 2025-08-30 · CVE-2025-52856

Positive Technologies · (AI Summary)

CVSS v4.0

9.3

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions:

VioStor versions prior to 5.1.6 build 20250621

Description:

An improper authentication issue has been reported in VioStor, potentially allowing a remote attacker to compromise system security.

Recommendations:

Update to VioStor version 5.1.6 build 20250621 or later.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2025-52856

Affected Products

Viostor

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-52856 · Security Note
• https://twitter.com/CVEnew/status/1961484489609126177 · Twitter Post
• https://qnap.com/en/security-advisory/qsa-25-29 · Note
• https://twitter.com/the_yellow_fall/status/1961493189686440396 · Twitter Post
• https://twitter.com/CveFindCom/status/1961484015979930068 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1961520681008390548 · Twitter Post
• https://twitter.com/catnap707/status/1961565216808005727 · Twitter Post
• https://twitter.com/offseq/status/1961602505013350758 · Twitter Post
• https://twitter.com/fridaysecurity/status/1961493076536398124 · Twitter Post