CVE-2025-54161: File Station 5
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.
We have already fixed the vulnerability in the following version: File Station 5 5.5.6.5068 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54161?
CVE-2025-54161 has a critical severity rating due to the potential impact of resource exhaustion by an attacker.
How do I fix CVE-2025-54161?
To fix CVE-2025-54161, ensure that you apply the latest software updates for Synology File Station 5 and QNAP File Station.
What systems are affected by CVE-2025-54161?
CVE-2025-54161 affects Synology File Station 5 versions up to 5.5.6.5068 and QNAP File Station versions between 5.5.6.4691 and 5.5.6.5190.
Who can exploit CVE-2025-54161?
CVE-2025-54161 can be exploited by an attacker who gains access to an administrator account within the affected software.
What are the consequences of CVE-2025-54161 being exploited?
Exploitation of CVE-2025-54161 can lead to denial of service as other systems, applications, or processes may be blocked from accessing resources.