NAS Archives - Page 4 of 4 - Security Affairs

Pierluigi Paganini October 21, 2018

WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

Security researchers from WizCase have discovered several vulnerabilities in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS. NAS devices have become the storage device of choice for many small and medium businesses (SMB). They are inexpensive, easy to operate, and you can add additional storage if you’re running low on space. But is it secure enough […]

Pierluigi Paganini October 03, 2018

Experts found 9 NAS flaws that expose LenovoEMC, Iomega Devices to hack

Experts discovered nine vulnerabilities affecting NAS devices that could be exploited by unauthenticated attackers to access protected content. Nine flaws affecting NAS devices could be exploited by unauthenticated attackers to access protected content. The vulnerabilities are traked as CVE-2018-9074, CVE-2018-9075, CVE-2018-9076, CVE-2018-9077, CVE-2018-9078, CVE-2018-9079, CVE-2018-9080, CVE-2018-9081 and CVE-2018-9082. According to Lenovo, the flaws affect 20 models of network attached storage (NAS) devices sold by the […]

Pierluigi Paganini September 19, 2018

Flaw in Western Digital My Cloud exposes the content to hackers

An authentication bypass vulnerability in Western Digital My Cloud NAS could allow hackers to access the content of the storage Researchers at security firm Securify have discovered an elevation of privilege vulnerability in the Western Digital My Cloud platform that could be exploited by attackers to gain admin-level access to the device via an HTTP request. The flaw, […]

Pierluigi Paganini February 03, 2018

Western Digital My Cloud flaws allows local attacker to gain root access to the devices

Trustwave disclosed two vulnerabilities in Western Digital My Cloud network storage devices could be exploited by a local attacker to gain root access to the NAS devices. Researchers at Trustwave disclosed two new vulnerabilities in Western Digital My Cloud network storage devices could be exploited by a local attacker to delete files stored on devices or to […]

Pierluigi Paganini January 23, 2018

SaaS webservice for Seagate’s GoFlex Home Storage devices vulnerable to MiTM and XSS

Security expert found more than 33000 Seagate’s GoFlex Home network-attached storage (NAS) devices vulnerable exposed online. Seagate has patched several vulnerabilities in its Personal Cloud and GoFlex products, but unfortunately, some flaws remain unpatched. In September, researcher Aditya K. Sood discovered vulnerabilities that can be exploited by attackers to launch cross-site scripting (XSS) and man-in-the-middle (MitM) attacks against […]

Pierluigi Paganini October 02, 2017

Netgear addressed dozens of vulnerabilities in Routers, Switches and NAS

Netgear has published more than 50 security advisories in the past 2 weeks related to the availability of patches for flaws in its products. Netgear has published more than 50 security advisories in the past two weeks related to the availability of patches for vulnerabilities affecting its products, including routers, switches, network-attached storage (NAS) devices, […]

Pierluigi Paganini September 12, 2016

Mal/Miner-C mining malware leverages NAS devices to spread itself

Experts from Sophos discovered Mal/Miner-C, a malware designed to abuse resources of the infected machine to mine Monero (XMR) cryptocurrency. Malware researchers from security firm Sophos have analyzed a new strain of malware detected as Mal/Miner-C that was designed to abuse resources of the infected machine to mine Monero (XMR) cryptocurrency. The experts discovered that the new […]

Pierluigi Paganini March 02, 2015

Seagate NAS affected by a Remote Code Execution zero-day vulnerability

A security expert discovered a Remote Code Execution zero-day vulnerability in Seagate Network Attached Storage (NAS) systems. A critical zero-day vulnerability affects Network Attached Storage (NAS) device software produced by the Seagate firm. The vulnerability was discovered by the security researcher OJ Reeves on October 7 and reported to Seagate that still hasn’t fixed the zero-day. The Seagate […]

Pierluigi Paganini December 16, 2014

Worm exploits Shellshock to infect QNAP systems

Security experts at Sans Institute discovered a worm which exploits the popular Shellshock flaw to compromise QNAP systems in the wild. Experts at Sans Institute have discovered a new series of attacks in the wild exploiting the Shellshock attack code to compromise disk storage systems made by the Taiwan-based QNAP firm. The threat actors used […]

NAS

WizCase Report: Vulnerabilities found in WD My Book, NetGear Stora, SeaGate Home, Medion LifeCloud NAS

Experts found 9 NAS flaws that expose LenovoEMC, Iomega Devices to hack

Flaw in Western Digital My Cloud exposes the content to hackers

Western Digital My Cloud flaws allows local attacker to gain root access to the devices

SaaS webservice for Seagate’s GoFlex Home Storage devices vulnerable to MiTM and XSS

Netgear addressed dozens of vulnerabilities in Routers, Switches and NAS

Mal/Miner-C mining malware leverages NAS devices to spread itself

Seagate NAS affected by a Remote Code Execution zero-day vulnerability

Worm exploits Shellshock to infect QNAP systems

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Researchers cracked the encryption used by DarkBit ransomware

Chrome sandbox escape nets security researcher $250,000 reward

Smart Buses flaws expose vehicles to tracking, control, and spying

MedusaLocker ransomware group is looking for pentesters

Google confirms Salesforce CRM breach, faces extortion threat

QUICK LINKS

NAS

newsletter

Subscribe to my email list and stay up-to-date!

recent articles

Subscribe to my email list and stay
up-to-date!