NAS540 - Samba protocol update?

JockeSve
JockeSve Posts: 80  Ally Member
First Anniversary 10 Comments Friend Collector First Answer
Is there any plan to update SMB version for NAS540 / NAS540 v2?

Accepted Solution

  • Fredzoul1
    Fredzoul1 Posts: 97  Ally Member
    Answer ✓
    As I know, Zyxel have patched the sambacry in product with adding a simple code line.

All Replies

  • Fredzoul1
    Fredzoul1 Posts: 97  Ally Member
    edited November 2017
    I don't know, but many time asked in many forum without clear response or clear planning
  • JockeSve
    JockeSve Posts: 80  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    Sounds somewhat strange IMHO...
    That should quite high priority to solve with new firmware!
  • Fredzoul1
    Fredzoul1 Posts: 97  Ally Member
    Normally !
  • JockeSve
    JockeSve Posts: 80  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    Would be interesting to hear how Zyxel thinks about this...

    The vulnerability has been out there for quite some time now.
    Several other vendors has the option to choose SMB version out of the box...
  • Mijzelf
    Mijzelf Posts: 2,598  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Which vulnerability are you talking about? Sambacry? Firmware 5.21 is supposed to be patched.
    http://www.zyxelforum.de/sambacry-sicherheitslücke-cve-2017-7494-informationen-t11639.html
  • JockeSve
    JockeSve Posts: 80  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    Ohhh, couldn't find anything in release notes...
    So, Samba is based on SMB v2 or v3?
  • Mijzelf
    Mijzelf Posts: 2,598  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    The box runs version 4.1.7.

    admin@NAS520:/$ /usr/sbin/smbd --version
    Version 4.1.7

    According to this page that means it supports SMB3
  • JockeSve
    JockeSve Posts: 80  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    If that's true then there is still risk of getting affected by both EternalRed or SambaCry...

  • Fredzoul1
    Fredzoul1 Posts: 97  Ally Member
    Answer ✓
    As I know, Zyxel have patched the sambacry in product with adding a simple code line.

Consumer Product Help Center