Resource Throttling Vulnerability in QNAP File Station
CVE-2025-53413

4.9MEDIUM

Key Information:

Vendor

QNAP
Status
File Station 5
Vendor
CVE Published:
7 November 2025

What is CVE-2025-53413?

A vulnerability in QNAP's File Station 5 allows remote attackers with valid user accounts to exploit resource allocation without limits, potentially hindering other systems or applications from accessing vital resources. This can lead to significant disruptions in service and efficiency across connected systems. QNAP has addressed this issue in version 5.5.6.5018 and later, urging users to update promptly.

Affected Version(s)

File Station 5 5.5.x < 5.5.6.5018

References

https://www.qnap.com/en/security-advisory/qsa-25-38

CVSS V4

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

coral
JSON
.