View all newsletters
Receive our newsletter - data, insights and analysis delivered to you

Network-attached storage devices have more security holes than routers

In fact they are ‘far worse than routers’, researcher adds.

By CBR Staff Writer

Network-attached storage (NAS) devices are reportedly more vulnerable compared to home routers, a new security report has revealed.

According to security mettle-detectors Independent Security Evaluators, of the overall devices analysed from ten manufacturers, almost all of them were found to be vulnerable.

Independent Security Evaluators security analyst Jacob Holcomb told PCWorld: "There wasn’t one device that I literally couldn’t take over.

"At least 50 percent of them can be exploited without authentication."

During the experiments, Holcomb evaluated devices including Asustor’s AS-602T, TRENDnet’s TN-200 and TN-200T1, QNAP’s TS-870, Seagate’s BlackArmor 1BW5A3-570, Netgear’s ReadyNAS104, D-LINK’s DNS-345, Lenovo’s IX4-300D, Buffalo’s TeraStation 5600, Western Digital’s MyCloud EX4 and ZyXEL’s NSA325 v2.

To date, the security organisation MITRE has allotted 22 Common Vulnerabilities and Exposures (CVE) for the issues.

Further, hackers can more likely access router from internet than a NAS system, and by hacking these storage devices, hackers would also be able to take over traffic from other devices on the same network using techniques such as ARP spoofing.

Content from our partners
DTX Manchester welcomes leading tech talent from across the region and beyond
The hidden complexities of deploying AI in your business
When it comes to AI, remember not every problem is a nail

Websites in our network
Select and enter your corporate email address Tech Monitor's research, insight and analysis examines the frontiers of digital transformation to help tech leaders navigate the future. Our Changelog newsletter delivers our best work to your inbox every week.
  • CIO
  • CTO
  • CISO
  • CSO
  • CFO
  • CDO
  • CEO
  • Architect Founder
  • MD
  • Director
  • Manager
  • Other
Visit our privacy policy for more information about our services, how Progressive Media Investments may use, process and share your personal data, including information on your rights in respect of your personal data and how you can unsubscribe from future marketing communications. Our services are intended for corporate subscribers and you warrant that the email address submitted is your corporate email address.