IDK what DSM is but I know some of you nerds like hacking Synology stuff.

[cr0w@infosec.exchange]

IDK what DSM is but I know some of you nerds like hacking Synology stuff.

https://www.synology.com/en-global/security/advisory/Synology_SA_26_13

[hrbrmstr@mastodon.social]

@cR0w thought for a second you accidentally left out the B

[cr0w@infosec.exchange]

@hrbrmstr That's when it gets added to the KEV. 🫦

[nerdpr0f@infosec.exchange]

@cR0w Distributed Silliness Module

[christopherkunz@chaos.social]

@cR0w Synology's Linux flavor for their NAS boxes. Much GUI, very shell and CGI wrapper, wow!

[wdormann@infosec.exchange]

@cR0w
Synology on September 18:

Upgrade to 7.4-90075 or above.

Also Synology on July 24:
We've released Synology DSM 7.4.1-90080

[christopherkunz@chaos.social]

@cR0w What. *squints* The first one allows _unauthenticated_ attackers to read arbitrary files on a NAS?
I errmm... have questions.

[cr0w@infosec.exchange]

@wdormann

checks date on calendar

checks again

sigh

[cr0w@infosec.exchange]

@christopherkunz The S in NAS stands for security.

Wait, there is an S in NAS. Dammit. Well, it certainly doesn't stand for security.

[huronbikes@cyberplace.social]

@cR0w @christopherkunz "it's not like anyone will attach this storage to a network."

[fuzzyfuzzyfungus@cyberplace.social]

@christopherkunz @cR0w Unauth reads mean that you get 200% credit for 'availability' and can construct the 'AIA triad'.

And if there are any unauth writes it's 300% credit, you construct the 'AAA' triad and shiftily try to blame DNS. Doesn't work in IPv6 only environments; but what are the odds?

[cr0w@infosec.exchange]

@fuzzyfuzzyfungus @christopherkunz I believe you mean "AITA" since you're talking about Synology.

[christopherkunz@chaos.social]

@cR0w The "H" in Synology stands for "Hardened".

[wdormann@infosec.exchange]

@cR0w
I can only assume that this is a case of "roll out the update and wait long enough for the masses to install it before telling anyone about the vulnerabilities it fixes" ? ‍️

[cr0w@infosec.exchange]

@wdormann I'm glad that's not as common as it used to be but it still frustrates me when vendors do that.

[fuzzyfuzzyfungus@cyberplace.social]

@cR0w @christopherkunz Once they started with the drive-locking nonsense that was no longer a question.

Yeah guys, sell dodgy SMB toys; try to play enterprise SAN pricing games. Hell no.

[cr0w@infosec.exchange]

@fuzzyfuzzyfungus @christopherkunz I don't know much about them but I hear people talk about using them all the time and I occasionally find a random one on a network for what I am sure is totally legit purposes.

[christopherkunz@chaos.social]

@cR0w @fuzzyfuzzyfungus This whole toot could be about a NAS or a Cobalt Strike beacon.

[cr0w@infosec.exchange]

@christopherkunz @fuzzyfuzzyfungus OMG you're right.