SB2025060924 - Multiple Vulnerabilities in QNAP File Station 5

Description

This security bulletin contains information about 4 secuirty vulnerabilities.

1) Improper Certificate Validation (CVE-ID: CVE-2025-22486)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to improper certificate validation. A remote user can compromise the security of the system.

2) Improper Certificate Validation (CVE-ID: CVE-2025-29883)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to improper certificate validation. A remote user can perform a denial of service (DoS) attack.

3) Improper Certificate Validation (CVE-ID: CVE-2025-29884)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to improper certificate validation. A remote user can perform a denial of service (DoS) attack.

4) Improper Certificate Validation (CVE-ID: CVE-2025-29885)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to improper certificate validation. A remote user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://www.qnap.com/en/security-advisory/qsa-25-09