\u00abThe battle for information security, as we know, is endless and it is unlikely that it will ever lead to an absolute victory. A recent report from the Independent Security Evaluators (ISE) organization puts the spotlight on network equipment intended for tried consumers or small businesses - specifically, 13 NAS and routers manufactured by ASUS, Buffalo, Drobo, Lenovo, Netgear, QNAP, Seagate, Synology, TerraMaster, Xiaomi, Zioncom and Zyxel.<\/p>\n
<\/p>\n
The results of the study are not very encouraging. Overall, 125 different vulnerabilities were found (naturally distributed among the various devices). The vulnerabilities allowed researchers to obtain root access privileges on 12 products, 6 of which without the need for authentication; and in all 13 at least one web app flaw was found, thanks to which it is possible to remotely access the shell or the management page.<\/p>\n
<\/p>\n
ISE has chosen the devices to be tested based (also) on their diffusion: all have been analyzed with the latest stable firmware available publicly. The company has reported all vulnerabilities to their respective manufacturers - most said they will fix the bugs as soon as possible. However, Buffalo, Drobo and Zioncom made no statements. Below is the detailed list of tested devices:<\/p>\n
<\/p>\n
ASUS RT-AC3200<\/p>\n
Asustor AS-602T<\/p>\n
Buffalo TeraStation TS5600D1206<\/p>\n
Drobo 5N2<\/p>\n
Lenovo ix4-300d<\/p>\n
Netgear Nighthawk R9000<\/p>\n
QNAP TS-870<\/p>\n
Seagate STCR3000101<\/p>\n
Synology DS218j<\/p>\n
TerraMaster F2-420<\/p>\n
Xiaomi Mi Router 3 (on the market since 2016)<\/p>\n
Zioncom TOTOLINK A3002RU<\/p>\n
Zyxel NSA325 v2<\/p>\n
<\/p>\n
As we said at the beginning of the article, it is impossible to expect a device to be completely inviolable, but the researchers at ISE note that the products tested include rather trivial vulnerabilities "that would be considered unacceptable in modern web applications outside of IT environments". The researchers advise manufacturers of IoT devices to "start training their developers on good security practices, and use dedicated teams, external or internal, to test the software running on the products." Some serious flaws have been observed for some time. "<\/p>\n
\u00a0<\/strong><\/p>\n #digife #website #website #ecommerce #ecommerce #webdesign #seo #digitalmarketing #graphicdesign #business #websitedesign #webdevelopment #webdesigner #branding #webdeveloper #socialmediamarketing #entrepreneur #startup #digital #malware #hacker #hacking #security #virus #cybercrime #antivirus #cyberattack #spyware<\/p>\n <\/p>\n Source http:\/\/bit.ly\/2kMJt77<\/p>","protected":false},"excerpt":{"rendered":" \u00abThe battle for information security, as we know, is endless and will hardly ever lead to an absolute victory. A recent report by the Independent Security Evaluators (ISE) organization puts the spotlight on ...<\/p>","protected":false},"author":28,"featured_media":30384,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":{"0":"post-30383","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-curiosita-web"},"_links":{"self":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts\/30383","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/users\/28"}],"replies":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/comments?post=30383"}],"version-history":[{"count":0,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/posts\/30383\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/media\/30384"}],"wp:attachment":[{"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/media?parent=30383"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/categories?post=30383"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.digife.it\/en\/wp-json\/wp\/v2\/tags?post=30383"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}