Pierluigi Paganini February 15, 2022

Taiwanese vendor QNAP extended the security update window for some devices that have reached end-of-life (EOL).

Taiwanese vendor QNAP extended the security update for some devices that have reached end-of-life (EOL) years ago.

The company decided to extend until October this year the security updates for some models that have reached EOL, the decision aims at giving time its users time to upgrade devices.

Device models for which the company extended the end date of security updates include 64-bit models and ARM models that support NAS OS versions QTS 4.2.6, 4.3.3, 4.3.6, and 4.4.1.

The company will release security updates for EOL models to only address high or critical security issues.

“EOL models may lack computational capabilities, be short on operational memory, be unable to receive up-to-date component drivers, or possess other technical constraints or deprecated technology,” states the Taiwanese vendor.

“The support for EOL models will be limited to high or critical security updates until the end of Technical Support and Security Updates date,”

NAS devices are privileged targets of cybercriminals, a couple of weeks ago QNAP forced the firmware update for its Network Attached Storage (NAS) devices to protect its customers against the DeadBolt ransomware.

DeadBolt ransomware is targeting QNAP NAS devices worldwide, its operators claim the availability of a zero-day exploit that allows them to encrypt the content of the infected systems.

Recently a new wave of Qlocker ransomware was observed targeting QNAP NAS devices worldwide. In December 2021, experts also observed ech0raix ransomware attacks targeting QNAP network-attached storage (NAS) devices.

Follow me on Twitter: @securityaffairs and Facebook

Pierluigi Paganini

(SecurityAffairs – hacking, NAS)

[adrotate banner=”5″]

[adrotate banner=”13″]