QNAP File Station 5 NULL Pointer Dereference Vulnerability Leading to Denial-of-Service

A NULL pointer dereference vulnerability has been identified in QNAP File Station 5, specifically in versions 5.5.x. This vulnerability allows remote attackers with user account access to exploit the issue, leading to the termination of the application or service, causing a denial-of-service condition.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by leading to a crash or unresponsive state of the application or service.

Remediation

Users are advised to update QNAP File Station 5 to version 5.5.6.5018 or later. Instructions for updating the application are available on the QNAP website.