Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Synology NAS owners should take the network storage devices offline and manually update them as soon as possible, especially for older units.
Summary
Synology DS420+ The discovery of vulnerabilities in PHP led to large sections of the Internet updating servers to patch the software flaws. This doesn't just affect commercial webservers, as it is also a problem for home NAS units, including those with services that are accessible over the Internet. The PHP fiasco should've been a warning for everyone to start updating their devices more regularly.
Not just to protect against the PHP vulnerabilities, but other existing and older security threats too.
KazaSec's take
A newly disclosed vulnerability is only a real risk to your organization once it's confirmed present and exploitable in your own environment, not every CVE applies equally to every network. Knowing the difference is exactly what a proper vulnerability assessment is for.
Coverage details
Related security advisories
Relevant from KazaSec
More security news
We help organizations find and fix the gaps before they make headlines.