CVEvulnerability
CVE-2025-57713
1.3 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2026-02-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 1.3 LOW — CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-1390
Description
A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerability to gain sensitive information.
We have already fixed the vulnerability in the following version:
File Station 5 5.5.6.5166 and later
Affected configurations
• qnap file station (>= 5.5.6.4691 < 5.5.6.5190)
Related
Weakness · CWE (1)
- CWE-1390 Weak Authentication weakness
References
- https://www.qnap.com/en/security-advisory/qsa-26-03 Vendor Advisory