Multiple Vulnerabilities in File Station 5

Summary

Multiple vulnerabilities have been reported to affect File Station 5:

• CVE-2025-54155, CVE-2025-54161: Allocation of resources without limits or throttling vulnerability
  If a remote attacker gains access to an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource.
• CVE-2025-54162: Path traversal vulnerability
  If a remote attacker gains access to an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
• CVE-2025-62853, CVE-2025-66278, CVE-2026-22894: Path traversal vulnerability
  If a remote attacker gains access to a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
• CVE-2025-62855, CVE-2025-62856: Path traversal vulnerability
  If a local attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
• CVE-2025-54163: NULL pointer dereference vulnerability
  If a remote attacker gains access to an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
• CVE-2025-54169: Out-of-bounds read vulnerability
  If a remote attacker gains access to a user account, they can then exploit the vulnerability to obtain secret data.
• CVE-2025-57707: Improper neutralization of directives in statically saved code (static code injection) vulnerability
  If a remote attacker gains access to a user account, they can then exploit the vulnerability to access restricted data or files.
• CVE-2025-57713: Weak authentication vulnerability
  If exploited, remote attackers can gain sensitive information.
• CVE-2025-62854: Uncontrolled resource consumption vulnerability
  If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerabilities in the following version:

Recommendation

To fix the vulnerabilities, we recommend updating File Station 5 to the latest version.

Updating File Station 5

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "File Station 5" and then press ENTER.
   File Station 5 appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your File Station 5 is already up to date.
5. Click OK.
   The system updates the application.