QNAP File Station 5 Resource Allocation Vulnerability Allowing Denial-of-Service

A vulnerability has been identified in QNAP File Station 5, specifically in versions 5.5.x, that allows for resource allocation without limits or throttling. This issue can be exploited by remote attackers who gain access to an administrator account, enabling them to disrupt resource availability for other systems, applications, or processes. As a result, the vulnerability can be used to launch a denial-of-service attack.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, where affected resources become unavailable to users or applications.

Remediation

Users are advised to update QNAP File Station 5 to version 5.5.6.5018 or later. Instructions for updating the application are available on the QNAP website.