CVE-2025-52856

Published Aug 29, 2025

Last updated 6 days ago

VioStor

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-52856 is an improper authentication vulnerability affecting VioStor. A remote attacker can exploit this vulnerability to compromise the security of the system. Successful exploitation allows an attacker to gain unauthorized access to an application, service, or device. No privileges or user interaction are required for exploitation. The vulnerability has been fixed in VioStor version 5.1.6 build 20250621 and later.

Description: An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later
Source: security@qnapsecurity.com.tw
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.3
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

Weaknesses

security@qnapsecurity.com.tw: CWE-287

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 8

References