安全ID : QSA-25-31
Multiple Vulnerabilities in File Station 5
发布日期 : August 26, 2025
通用漏洞披露 : CVE-2025-29901 | CVE-2025-47206
受影响产品: File Station 5 version 5.5.x
严重程度
Moderate
状态
已解决
Summary
Multiple vulnerabilies have been reported to affect File Station 5:
- CVE-2025-29901: NULL pointer deference vulnerability. If a remote attacker gains access to a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
- CVE-2025-47206: Out of bounds write vulnerability. If a remote attacker gains access to a user account, they can then exploit the vulnerability to modify or corrupt memory.
We have already fixed the vulnerabilities in the following version:
Affected Product | Fixed Version |
File Station 5 version 5.5.x | File Station 5 version 5.5.6.4933 and later |
Recommendation
To fix the vulnerabilities, we recommend updating File Station 5 to the latest version.
Updating File Station 5
- Log on to QTS or QuTS hero as an administrator.
- Open App Center and then click
.
A search box appears. - Type "File Station 5" and then press ENTER.
File Station 5 appears in the search results. - Click Update.
A confirmation message appears.
Note: The Update button is not available if your File Station 5 is already up to date. - Click OK.
The system updates the application.
附件
致谢: coral
修订历史:
V1.0 (August 26, 2025) - Published