CVE-2025-52861

Published Aug 29, 2025

Last updated 6 days ago

VioStor

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-52861 is a path traversal vulnerability affecting VioStor. If a remote attacker gains an administrator account, they can exploit this vulnerability to read the contents of unexpected files or system data. The vulnerability has been fixed in VioStor version 5.1.6 build 20250621 and later. Users of VioStor versions prior to 5.1.6 are advised to update to the latest version to mitigate the risk.

Description: A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later
Source: security@qnapsecurity.com.tw
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 7
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

Weaknesses

security@qnapsecurity.com.tw: CWE-22

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 8

References