What is the CVSS score of EUVD-2025-17343?

EUVD-2025-17343 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of File Station are affected by EUVD-2025-17343?

Synology File Station 5 contains an improper certificate validation vulnerability (CVE-2025-22486) that allows authenticated users to bypass security controls and compromise system confidentiality,…. A patch is available.

How to fix or mitigate EUVD-2025-17343?

Within 24 hours: Inventory all Synology File Station 5 deployments and identify instances running versions prior to 5.5.6.4791. Within 7 days: Apply vendor patch to upgrade File Station 5 to version 5.5.6.4791 or later across all affected systems; prioritize user-facing and data-critical instances. Within 30 days: Conduct access review of File Station 5 user accounts to identify and remediate overprivileged accounts; implement network segmentation to limit File Station 5 access to authorized user groups only.

File Station EUVD-2025-17343

| CVE-2025-22486 HIGH

Improper Certificate Validation (CWE-295)

2025-06-06 security@qnapsecurity.com.tw

Information Disclosure File Station

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:44 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

5.5.6.4791

EUVD ID Assigned

Mar 14, 2026 - 18:10 euvd

EUVD-2025-17343

Analysis Generated

Mar 14, 2026 - 18:10 vuln.today

CVE Published

Jun 06, 2025 - 16:15 nvd

HIGH 8.8

DescriptionCVE.org

An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system.

We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791 and later and later

AnalysisAI

CVE-2025-22486 is an improper certificate validation vulnerability in Synology File Station 5 that allows authenticated remote attackers to compromise system confidentiality, integrity, and availability. The vulnerability affects File Station 5 versions prior to 5.5.6.4791, and while it requires valid user credentials (PR:L in CVSS), the lack of user interaction requirement (UI:N) and network accessibility (AV:N) make it a high-severity threat in multi-user environments. No confirmed KEV or active exploitation data is available at this time, but the high CVSS score of 8.8 and the nature of certificate validation bypass attacks warrant immediate patching.

Technical ContextAI

This vulnerability stems from CWE-295 (Improper Certificate Validation), a fundamental cryptographic control failure where the application fails to properly validate X.509 certificates during TLS/SSL connections. In the context of File Station 5, this likely affects SMB/CIFS protocol handling or inter-service communication where certificate pinning or hostname validation is inadequately enforced. The affected product is Synology File Station (CPE pattern: cpe:2.3:a:synology:file_station:*), a NAS management application. The root cause is insufficient verification of certificate chain integrity, issuer authenticity, or domain name matching, allowing man-in-the-middle (MITM) attacks or connection spoofing to trusted backend services. This is a protocol-level vulnerability affecting the TLS handshake validation logic.

RemediationAI

action: Immediate Patching; details: Upgrade File Station 5 to version 5.5.6.4791 or later. This patch addresses the improper certificate validation flaw.; priority: CRITICAL
action: Access Control Review; details: Audit user accounts with File Station access to ensure only necessary users have credentials. Disable unused accounts to reduce attack surface, as the vulnerability requires PR:L (authenticated access).
action: Network Segmentation; details: Restrict File Station access to trusted networks or implement VPN-based access. Reduce internal network exposure where MITM attacks exploiting certificate validation bypass could succeed.
action: Monitor for Suspicious Activity; details: Enable File Station and DSM audit logging to detect anomalous data access or system configuration changes that might indicate post-authentication compromise.
action: Vendor Advisory; details: Check Synology Security Advisory for official patch details and deployment guidance. Synology typically provides patches through DSM Package Manager or manual package downloads.