ASUSTOR DRIVESTOR 2 Pro Gen2 (AS3302T v2)

From Wiki-IoT



ASUSTOR DRIVESTOR 2 Pro Gen2 (AS3302T v2)
Security Grade
   
     F
   
Calculator v1
ASUSTOR DRIVESTOR 2 Pro Gen2 (AS3302T v2)
   Brand: ASUSTOR 
   Category: Computer • Model / Gen: DRIVESTOR 2 Pro Gen2 AS3302T v2
   Release Date: 2024-01-08 • Status: 
   Classification Date: 2026-10-26 • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Very common [1] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Physical interfaces and recovery controls are documented.
Known vulnerabilities Very common 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {2,3}. Not a demonstrated finding. ADM has documented historical vulnerabilities, including version-scoped certificate-validation issues. The suggested frequency mapping remains qualitative.
Prior attacks Very common [2] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. No model-matched evidence of involvement in prior IoT attacks was established. Platform incidents or vulnerability demonstrations do not determine this score.
Updatability Rare [3] 🔗 Proof PROVISIONAL ASSUMPTION 2/3; candidates {1,2}. Not a demonstrated finding. Online updates, compatible ADM release notes and a minimum security-support policy are documented for this product family.
Category Score Score: 3 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems No [4] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Authentication and encrypted-service options exist, but service coverage and historical certificate-validation fixes require version-scoped assessment.
Communications No encryption [5] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. TLS-protected services are documented, but optional HTTP and file-service channels require an explicit enabled-service baseline.
Storage No encryption 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Device-flash encryption remains unverified. Data-folder encryption, encrypted backups or firmware-package flags are insufficient evidence for this field.
Category Score Score: 3 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Full [6] 🔗 Proof Documented capability; CRIS 1. The ADM 5 manual documents ordinary users, group privileges, deletion and password changes.
Authentication Basic [7] [8] 🔗 Proof PROVISIONAL ASSUMPTION 2/3; candidates {1,2}. Not a demonstrated finding. ADM provides password authentication and optional two-step verification. Physical recovery and version-dependent reset behavior must be included.
Brute-force protection Absent [9] [10] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. The official FAQ documents IP blocking after failed logins; enablement and the target ADM configuration remain conditional.
Event logging Partial logging [11] 🔗 Proof PROVISIONAL ASSUMPTION 2/3; candidates {1,2}. Not a demonstrated finding. ADM documents connection and file-access logs; complete login-event coverage remains unverified.
Passwords Default/Common/Easy to guess [12] 🔗 Proof PROVISIONAL ASSUMPTION 3/3; candidates {1,2,3}. Not a demonstrated finding. Configurable password-strength rules are documented, but first-setup enforcement and recovery defaults remain version dependent.
Category Score Score: 3 / 3

Technical Specifications

Property Details
Operating System & App ASUSTOR ADM; compatible firmware per model release notes (Companion App: ASUSTOR Control Center; AiMaster)
Hardware (CPU / GPU) CPU: Realtek RTD1619B, quad-core 1.7 GHz • GPU: Integrated graphics/transcoding; GPU model not specified
Memory & Storage Memory: 2 GB DDR4, not expandable • Storage: 2×SATA3 drive bays (3.5-inch HDD / 2.5-inch HDD or SSD); onboard flash capacity not verified
Power, Battery & Charging Battery: Externally powered; no operating battery specified (RTC backup not assessed) • Power: 65 W external adapter; operation 13.1 W, disk hibernation 4.5 W • Charging: Not applicable to normal external-power operation
Display & Camera Display: • Camera:
Sound & Connectivity Sound: System buzzer • Connectivity: 1×2.5GbE; 3×USB 3.2 Gen 1; reset button; K-lock
Physical (Dimensions & Mass) Dimensions: 170(H) × 114(W) × 230(D) mm • Mass: 1.6 kg


PROVISIONAL CONSERVATIVE SCENARIO — NOT CONFIRMED DEVICE DEFECTS. Unknown items use the upper-bound score by submitter request. The letter grade below is temporary, subject to further evidence and administrator review.


Provisional assessment — not administrator approved

Conservative provisional rating: F; GRAS 9/9.

This is an explicitly assumed upper-bound document-review scenario, not a confirmed dangerousness finding or an administrator-approved classification. On 25 October 2026 the submitter authorized selecting the highest evidence-consistent candidate score for each criterion. A completely unknown item is temporarily scored 3. The selected labels such as Very common, No encryption, No authentication or Absent do NOT establish that those conditions were observed. Unknown is not evidence of absence.

No physical device, installed firmware or actual configuration was inspected. Missing optional hardware parameters remain blank. Administrator-only classification date and calculator-version fields have not been set. The official classification may remain blank until administrator approval.

Scope

明确AS3302T v2,不能套用AS3302T初代RTD1296参数。官方索引已返回型号规格摘要,当前直开规格书遇403;正式逐字段录入前应再核对全文。

Calculation

Using the published methodology: ceil(mean of Device 4 criteria)) + ceil(mean of System 3 criteria)) + ceil(mean of User 5 criteria)).

  • Device CATS: 3
  • System CATS: 3
  • User CATS: 3
  • GRAS: 9; provisional grade: F
  • Evidence-consistent outer range before selecting the conservative scenario: 4–9, candidate grades A / A- / B / C / D / F. This is an uncertainty envelope, not a statistical confidence interval.

Criterion assumptions and evidence gaps

Criterion Selected CRIS Candidate scores Basis
device_known_hardware_tampering 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
device_known_vulnerabilties 3 {2, 3} Upper-bound assumption; not a demonstrated defect.
device_prior_attacks 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
device_updatability 2 {1, 2} Upper-bound assumption; not a demonstrated defect.
system_authentication_with_other_systems 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
system_communications 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
system_storage 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
user_authentication_account_management 1 {1} Documented capability under cited scope.
user_authentication_authentication 2 {1, 2} Upper-bound assumption; not a demonstrated defect.
user_authentication_brute_force_protection 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.
user_authentication_event_logging 2 {1, 2} Upper-bound assumption; not a demonstrated defect.
user_authentication_passwords 3 {1, 2, 3} Upper-bound assumption; not a demonstrated defect.

Hardware and date limitations

  • parent_company: Not established; left blank. 未把品牌所有者、制造商或历史投资人直接等同为母公司;可选字段可暂留空
  • type: Computer 网站已有Computer大类;正文注明NAS或KVM用途;不新造子类别
  • status: Not established; left blank. 产品页存在不充分证明指定硬件版本仍在售;销售状态可选,待地区/修订状态确认
  • mass: 1.6 kg 本轮型号规格书索引及候选规格;正式填写前再读全文
  • operating_system: ASUSTOR ADM; compatible firmware per model release notes 索引写ADM4.1 onwards,不指定出厂版或已安装版
  • companion_app: ASUSTOR Control Center; AiMaster Control Center见型号QIG;移动app版本另核
  • gpu: Integrated graphics/transcoding; GPU model not specified 不从SoC资料推导具体Mali型号
  • battery: Externally powered; no operating battery specified (RTC backup not assessed) 只描述工作供电方式;不据此断言主板完全没有备份电池
  • power: 65 W external adapter; operation 13.1 W, disk hibernation 4.5 W 功耗为厂商测试值;适配器铭牌输出待核
  • charging: Not applicable to normal external-power operation 这是有线供电设备的工作充电字段;不涉及给手机充电或PoE输出
  • display: Not established; left blank. 型号手册未明确该硬件;留空而非无证据写None
  • camera: Not established; left blank. 型号手册未明确该硬件;留空而非无证据写None

Basic and hardware sources

Review status

Document review date: 2026-10-25 (Asia/Shanghai). Provisional scenario requested by the submitter. The numerical calculation above is not a claim of administrator approval. The page must be read back after saving; any CAPTCHA, database error, moderation queue, or missing official grade remains an outstanding submission step.