File Station CVE-2025-29885

The CVSS 3.1 vector (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) with a score of 8.8 indicates high severity: network-accessible attack with low complexity requiring low privileges (authenticated user) with no user interaction, resulting in complete compromise of confidentiality, integrity, and availability. The requirement for prior user authentication (PR:L) significantly reduces the attack surface compared to unauthenticated vulnerabilities. Without EPSS score, KEV status, or POC confirmation provided in the intelligence data, the real-world exploitation risk cannot be fully quantified; however, the combination of high CVSS and certificate validation flaws suggests moderate-to-high practical exploitability. Organizations with File Station 5 exposed to untrusted users or in multi-tenant environments face elevated risk. This should be prioritized for patching based on environmental exposure and user trust levels.

An attacker with valid File Station 5 credentials (obtained through credential compromise, insider threat, or social engineering) exploits the improper certificate validation flaw to intercept and modify secure communications with the File Station 5 backend. The attacker could leverage this to escalate privileges, access sensitive file metadata, modify files, or execute arbitrary commands on the system. For example: (1) Attacker logs in as a standard user to File Station 5, (2) Exploits the certificate validation flaw to bypass TLS verification during API calls to backend services, (3) Intercepts and modifies requests to access admin-level functions or retrieve sensitive data, (4) Achieves full system compromise. The network-accessible attack vector means this could occur over the internet if File Station 5 is exposed externally. No confirmed POC or active KEV status was provided in the intelligence data, but the low attack complexity and certificate validation nature of the flaw suggests proof-of-concept development is likely feasible by motivated threat actors.