File Station CVE-2025-29884

While the CVSS 8.8 score is high, real-world risk must be contextualized: (1) Attack Vector is Network but requires PR:L (Low Privilege/authenticated access), meaning attackers must first obtain valid user credentials—a significant precondition; (2) AC:L indicates low attack complexity once authenticated, making exploitation straightforward; (3) Impact is catastrophic (C:H, I:H, A:H) for confidentiality, integrity, and availability; (4) The absence of KEV status and public POC suggests no active exploitation in the wild yet; (5) EPSS data is not provided, but the low-complexity, high-impact profile suggests moderate-to-high probabilistic exploitation once tools surface. Risk priority: MEDIUM-HIGH for organizations running vulnerable File Station 5 versions with exposed user access; CRITICAL if File Station is internet-facing or handles sensitive data. This is NOT a low-risk high-CVSS case—the authentication requirement moderates but doesn't eliminate risk significantly.

An attacker with knowledge of a valid File Station user account (obtained via phishing, credential stuffing, or insider access) authenticates to the service. During the authenticated session, the attacker positions themselves on the network path (via ARP spoofing, DNS hijacking, or compromised network infrastructure) to intercept HTTPS traffic. Due to improper certificate validation in File Station 5, the application accepts the attacker's self-signed or fraudulent certificate without verification. The attacker then decrypts and modifies traffic in transit, gaining the ability to: (1) steal sensitive data files stored on the NAS (Confidentiality breach), (2) modify or delete files or user accounts (Integrity breach), or (3) inject malicious code or disable services (Availability breach). The low attack complexity means this requires only standard MITM tooling once authentication is compromised. No public POC has been disclosed as of this analysis, but exploitation probability is non-trivial given the straightforward nature of certificate validation bypasses.