CVE-2025-29876: File Station 5
Published Jun 6, 2025
·Updated
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later
Affected Software
2 affected components
Synology File Station 5<5.5.6.4847
QNAP File Station>=5.5.6.4691<5.5.6.4847
Remediation
Information
We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.4847 and later
Event History
Jun 6, 2025
CVE Published
via MITRE·03:52 PM
Data Sourced
via MITRE·03:52 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-29876?
CVE-2025-29876 is considered a high-severity vulnerability due to its potential to enable denial-of-service attacks.
2
How do I fix CVE-2025-29876?
To fix CVE-2025-29876, upgrade to File Station 5 version 5.5.6.4848 or later.
3
What type of vulnerability is CVE-2025-29876?
CVE-2025-29876 is a NULL pointer dereference vulnerability.
4
Who can exploit CVE-2025-29876?
A remote attacker with a valid user account can exploit CVE-2025-29876.
5
What impact does CVE-2025-29876 have on systems?
CVE-2025-29876 can lead to a denial-of-service (DoS) condition on affected systems.