Twonky server 8.5.1 upgrade on Zyxel NAS?

npreis

Hi,

I wonder will the Zyxel NAS family still get software updates for all the installed apps? I look into the latest version of Twonky on the NAS.

Thanks

npreis


#NAS_Feb_2020

CAT

Reply from Zyxel support:
.. Twonky Media Server .. is not supposed to be accessible from the Internet in the first place .. Twonky Media Server is integral part of the firmware, and not even with unofficial repository it is possible to update the server (no suitable package exists). While you can try to update it manually, I am not sure if it will work, both technically and license-wise (Twonky is not a freeware/GNU software).

CAT

For the record:

Follow this article https://medium.com/@alegiovanardi/it-security-twonky-server-unprotected-servers-open-on-the-web-f04f36070b12 All Twonky Media Server versions between 7.0.11 -> 8.5 have been tested as vulnerable.

The latest available version now is 8.5.2 :
https://twonky.com/downloads/
https://download.twonky.com/8.5.2/
https://docs.twonky.com/

Zyxel_Jerry

Hi @ CAT

Thanks you for sharing the information.

We’ve aware of the vulnerability issue of the twonky server.

We’ll release a firmware at the beginning of May which based on twonky server 8.5.2 version.