File Station EUVD-2025-17344

The risk assessment presents a high-priority vulnerability despite requiring low privileges. CVSS 8.8 reflects maximum impact across all three security dimensions (C:H/I:H/A:H) with network-accessible attack vector and low complexity. The attack vector (AV:N) and low complexity (AC:L) indicate this is exploitable by remote attackers without special conditions. While privilege requirement (PR:L) limits the attack surface to authenticated users, this is not a significant barrier in organizations with numerous File Station users. The lack of user interaction requirement (UI:N) means exploitation can be automated and persistent. Real-world risk is elevated because: (1) improper certificate validation is trivially exploitable by any attacker capable of network interception or DNS hijacking, (2) the fix availability indicates active development concern, (3) no active exploitation signals (KEV status unknown from provided data) somewhat reduces immediate risk but does not eliminate it given the trivial exploitation complexity. This should be prioritized as a critical patch given the high impact potential and straightforward attack methodology, particularly in environments with sensitive file data or where File Station connects to external services.

An authenticated user (PR:L requirement satisfied) of File Station 5 initiates a file operation or accesses a feature requiring backend communication (e.g., cloud sync, backup verification, or external storage connection). An attacker positioned on the network (AV:N) or controlling DNS/network routing performs a man-in-the-middle attack, presenting a fraudulent certificate that File Station fails to validate due to CWE-295. The attacker intercepts the session, captures authentication tokens, exfiltrates file metadata, modifies file contents in transit (I:H), or gains access to system resources (C:H, A:H). Because exploitation requires no user interaction (UI:N) and low complexity (AC:L), an attacker could automate this attack across multiple File Station instances. Example: An attacker on a corporate WiFi network intercepts File Station's connection to a cloud storage backend, presenting a fake certificate. File Station accepts it without validation, and the attacker proxies the connection while harvesting credentials and file encryption keys. No POC availability data is provided, but the straightforward nature of certificate validation bypass attacks suggests public PoCs could be rapidly developed post-disclosure.