PHP security issues could also threaten your NAS device — but not every vendor is able to patch just yet
- Critical PHP2Shell flaws also impact internet-exposed NAS devices and PHP-based Docker workloads
- Major vendors are still releasing patches, leaving some Synology, QNAP, and other systems exposed
- Researchers urge immediate updates, removal of public exposure, and VPN-only remote access
Websites and web servers are apparently not the only products affected by the php2shell vulnerability - Network Attached Storage (NAS) devices are at risk, too - and to make matters worse, some of the most popular manufacturers have not yet released a patch, despite the flaws being actively abused in the wild.
Research by Apple Insider noted that the flaw also affects software maintained by NAS manufacturers, as well as applications running independently in Docker containers, with NAS devices that are reachable through the public internet also at risk.
What's particularly concerning is that some of the biggest NAS manufacturers have said to be working on a fix, but the work is...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
