File Station CVE-2025-29876

The CVSS 3.1 vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) presents a mixed risk profile. The score of 7.5 reflects: (1) high availability impact (A:H—complete DoS), (2) low attack complexity (AC:L—no special conditions), (3) network accessibility (AV:N), and (4) no confidentiality/integrity harm (C:N/I:N). However, the PR:N designation is inconsistent with the CVE description stating 'remote attacker gains a user account'—in practice, this should be PR:L or PR:H, which would lower CVSS to 6.5 or 5.3 respectively. Real-world risk is MODERATE: while DoS is disruptive, it requires authentication, limiting attacker scope to users with valid credentials, insider threats, or those exploiting leaked/default credentials. Exploitation is likely automatable (triggering a NULL dereference via malformed input), but impact is service disruption only, not data breach. Without KEV confirmation or public POC data provided, assess this as a standard authenticated DoS with moderate enterprise impact, particularly for organizations dependent on NAS uptime. Priority should be elevated for systems with external account sharing or weak credential hygiene.

An attacker with a valid File Station 5 user account (obtained through credential compromise, default credentials, or insider access) sends a specially crafted file operation request—such as a malformed file metadata query, path traversal attempt, or oversized operation parameter—that triggers improper NULL pointer handling in the application's request processing logic. The NULL dereference causes File Station 5 to crash, rendering file access unavailable to legitimate users. The attacker can repeat this attack to maintain prolonged DoS. Attack complexity is low because the attacker only needs valid credentials and network access; no exploit code sophistication is required if the vulnerability is trivially reproducible. In a corporate environment, this could be exploited by a disgruntled employee with NAS access, or by an external attacker who has compromised a user account through phishing or credential stuffing. Impact is limited to availability (service downtime), but in organizations relying on the NAS for collaborative file access, this constitutes significant operational disruption.