QNAP has decided to extend support for some of its end-of-life NAS, although it will not be as extensive as it was at the beginning. Companies with unsupported devices They will have until October of this year to renew it., but even with extended support, only certain risks of high severity will be mitigated.
The manufacturer has commented that these older models may lack computing power, have low operating memory, or be unable to receive updated component drivers along with other technical limitations. But to ensure that companies have more time margin, QNAP is going to expand security updates of some models considered obsolete until October 2022.
QNAP supports the security of old models, up to a certain limit
But these updates will be limited to addressing high severity and critical vulnerabilities. it is very likely that bugs of a certain severity can happen that do not receive an update to fix it. It must be borne in mind that with this decision they want to offer a certain security and margin to companies, which are already warned that they must renew their models of NAS.
In the same ad, they have warned customers that do not expose unsupported NAS devices to the Internet, as they could be targets for cybercriminals and ransomware attacks. They also recommend Disabling the port forwarding function of the router and Disabling the UPnP function of the QNAP NAS.
QNAP NAS are often the targets of dedicated cyberattacks, as it is the companies and private customers who purchase a private or business NAS to host the web and important data, thus becoming potential victims of ransomware. This is why QNAP never stops working on security updates for your NAS, in addition to recommending not to use models that have run out of support period.
Source: TechRadar
