Multiple security vulnerabilities in MD253 and MD254

MD-253 & MD-500 Discussion
Post Reply
alcyon
Posts: 2
Joined: Tue Aug 28, 2012 12:01 pm

Multiple security vulnerabilities in MD253 and MD254

Post by alcyon » Tue Aug 28, 2012 12:17 pm

We have disclosed the following security advisories regarding critical vulnerabilities in the MD-253 and MD-254 NAS:

http://www.alcyon.nl/advisories/aa-001/
http://www.alcyon.nl/advisories/aa-002/

We have created a package to enable BasicAuth browser authentication in order to prevent direct exposure of the web management UI protecting you from soon te be disclosed unpatched vulnerabilities. The package can be found here:

http://www.alcyon.nl/blog/sitecom-nas-m ... itigation/


Kind regards,

Mattijs van Ommeren

Post Reply