Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Multiple Router and NAS Device Vulnerabilities

Multiple vulnerabilities have been disclosed for a range of small office/home office (SOHO) wireless routers and network attached storage (NAS) devices.

Threat ID:
CC-3219
Category:
Threat Severity:
Low
Threat Vector:
Vulnerability
Published:
18 September 2019 12:00 AM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Multiple vulnerabilities have been disclosed for a range of small office/home office (SOHO) wireless routers and network attached storage (NAS) devices.

Threat details

A remote attacker could exploit these vulnerabilities to bypass authentication and gain full control over an affected device.

Remediation steps

Type Step

Users and administrators are encouraged to obtain updated firmware from their router manufacturers website:

At the time of publication it remains unclear whether updates have been released for the Zyxel NSA325 v2 NAS and the Xiaomi Mi Router 3.

Last edited: 14 February 2020 2:54 pm