CVE-2025-29885

CWE-295 — Improper Certificate Validation3 documents3 sources
Severity
8.3HIGH
EPSS
0.2%
top 54.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Qnap Systems Inc. File Station 5Qnap File Station
Timeline
PublishedJun 6

Description

An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791 and later and later

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H

Affected Packages2 packages

▶CVEListV5qnap_systems_inc./file_station_55.5.x — 5.5.6.4791
▶NVDqnap/file_station5.5.6.4691 — 5.5.6.4791

🔴Vulnerability Details

2
CVEList
File Station 5↗2025-06-06
▶
GHSA
GHSA-mf8r-m6vx-6fff: An improper certificate validation vulnerability has been reported to affect File Station 5↗2025-06-06
▶
CVE-2025-29885 (HIGH CVSS 8.3) | An improper certificate validation | cvebase.io