QNAP File Station 5 NULL Pointer Dereference Vulnerability Leading to Denial-of-Service

A NULL pointer dereference vulnerability has been identified in QNAP File Station 5, specifically in versions 5.5.x. This vulnerability allows remote attackers with user account access to cause a denial-of-service (DoS) condition by exploiting the NULL pointer dereference.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to update QNAP File Station 5 to version 5.5.6.4907 or later. Instructions for updating the application are available on the QNAP website.