File Station EUVD-2025-17332

CVSS 8.8 (High) with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H indicates: (1) Network-accessible attack requiring low complexity; (2) Low privilege bar (authenticated user required); (3) No user interaction needed; (4) High impact across all three security dimensions (confidentiality, integrity, availability). While this is a post-authentication vulnerability requiring valid credentials, the lack of UI interaction and network accessibility creates significant risk in environments with permissive user account creation or credential compromise. The vulnerability's severity is amplified by its scope (unchanged system) and the breadth of exploitation opportunities. Without confirmed KEV/CISA status or active POC availability in the provided data, the real-world risk remains elevated but somewhat constrained by the authentication requirement—however, this should not be deprioritized given the high-impact consequences and the likelihood that many NAS systems have multiple user accounts.

An authenticated attacker with valid File Station 5 credentials (obtained through credential compromise, social engineering, or opportunistic access) initiates a connection to the File Station service. Due to improper certificate validation, the attacker can perform a man-in-the-middle attack by presenting a forged or invalid certificate that the vulnerable service accepts without proper verification. This allows the attacker to intercept and decrypt traffic, forge commands, or escalate privileges within the NAS environment. For example, an attacker could: (1) intercept File Station API calls to extract sensitive data; (2) modify file metadata or access controls; (3) inject malicious payloads into file operations; (4) pivot to other NAS services or connected systems. The attack requires network access and valid credentials but no user interaction, making it practical in scenarios where account compromise has already occurred or in multi-tenant NAS deployments with permissive access controls. Without a confirmed POC, exploitation difficulty remains moderate but well within capability of motivated threat actors.