Synology DiskStation DS423+ (DS423+)

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	https://kb.synology.com/DSM/tutorial/How_to_reset_my_Synology_NAS_7 🔗 Proof	Desktop four-bay NAS with removable drive trays, USB/network ports, a physical RESET button and a Kensington security slot. Tray locks and a cable lock deter casual removal but do not establish resistance to invasive hardware changes.
Known vulnerabilities	Very common	https://www.synology.com/en-global/security/advisory/Synology_SA_24_20 🔗 Proof	Multiple DSM vulnerabilities documented across releases (e.g., CVE-2026-13684). Rates recurring platform vulnerability history, not current exploitability on patched builds.
Prior attacks	Rare	🔗 Proof	Synology reported real StealthWorker credential-guessing attacks in August 2021. NAS/platform threat history rather than a claimed exact-model incident.
Updatability	Very common	https://www.synology.com/en-us/security/advisory/Synology_SA_26_13 🔗 Proof	DSM supports official software updates and vendor security releases for supported branches.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	https://kb.synology.com/en-global/DSM/help/DSM/AdminCenter/file_user_create?version=7 🔗 Proof	DSM provides account permissions and AD/LDAP integration, but authentication strength depends on each protocol and client.
Communications	Encrypted with up-to-date encryption	https://global.download.synology.com/download/Document/Hardware/DataSheet/DiskStation/23-year/DS423%2B/enu/Synology_DS423%2B_Data_Sheet_enu.pdf 🔗 Proof	Conditional on HTTPS with a validated certificate and TLS 1.2/1.3 for the assessed management/file-transfer paths.
Storage	No encryption	—	WITHHELD: Available sources establish user-data volume encryption, not the internal flash-storage encryption required by WikiIoT methodology.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	https://global.download.synology.com/download/Document/Hardware/DataSheet/DiskStation/23-year/DS423%2B/enu/Synology_DS423%2B_Data_Sheet_enu.pdf 🔗 Proof	DSM supports multiple named users, groups and application/file permissions using distinct least-privilege accounts.
Authentication	Basic	https://kb.synology.com/DSM/tutorial/How_to_reset_my_Synology_NAS_7 🔗 Proof	Named password accounts and optional 2FA documented; rated Basic because physical recovery can reset administrative settings unless further protected.
Brute-force protection	Exist	https://www.synology.com/en-us/security/advisory/Synology_SA_26_06 🔗 Proof	Auto Block records failed sign-ins and can block source IPs after a configured threshold in the assessed profile.
Event logging	Access event logged	https://kb.synology.com/en-ca/DSM/tutorial/Why_do_I_keep_receiving_login_failure_message 🔗 Proof	DSM Login History records access time, protocol, and source IP; Account Activity and Log Center support access logging.
Passwords	Require change after setup with complexity requirements	🔗 Proof	Conditional configured policy: apply password-strength rules and require replacement after provisioning/at next login.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Synology DSM 7.2+; patched configured profile (Companion App: Synology Drive / Secure SignIn (optional))
Hardware (CPU / GPU)	CPU: Intel Celeron J4125 • GPU:
Memory & Storage	Memory: 2 GB DDR4; expandable to 6 GB • Storage: 4 SATA drive bays (storage criterion withheld)
Power, Battery & Charging	Battery: • Power: 100-240 VAC, 50/60 Hz via supplied adapter • Charging:
Display & Camera	Display: Status LEDs • Camera:
Sound & Connectivity	Sound: System notification buzzer • Connectivity: 2 x 1GbE RJ45; 2 x USB 3.2 Gen 1
Physical (Dimensions & Mass)	Dimensions: 166 x 199 x 223 mm (H x W x D) • Mass: 2.18 kg