You do not have permission to edit this page, for the following reasons:
Documentation-based security assessment: Synology DiskStation DS1520+. Reviewed 2026-10-23. Documentation-based assessment of a defined DSM 7.2.2-72806 Update 10 local-NAS profile. Native local users are used, with password-only DSM login. HTTP management and an NFS AUTH_SYS share are enabled on the LAN. Supported internal SATA SSDs hold the assessed unencrypted data volume and shared folder. Auto Block is enabled at 5 failed attempts within 5 minutes. The password policy requires at least 12 characters, upper- and lower-case letters and a digit; temporary administrator-assigned passwords must be replaced at the next sign-in. The standard physical reset behaviour is retained. These are the explicitly selected conditions of this document assessment, not a claim about factory defaults or an inspected physical unit. Ratings are reasoned mappings to WikiIoT options. Rare is used for a documented, bounded physical exposure or vulnerability/attack history; it is not a measured incident rate. Prior attacks refers to the documented Synology DSM NAS family campaign, not a claim that this exact model was a confirmed victim. For mixed protection, an enabled plaintext path is rated No encryption. Storage includes user data on internal SATA SSD flash in this profile; this does not assert the encryption state of every boot component. Exist, Full and Access event logged describe documented controls within the stated profile. Historical CVEs are retained as history after remediation. Release date is the date of the cited global English announcement: 2020-08-20. It is not asserted to be the earliest worldwide retail date. Historical vulnerability examples: CVE-2024-10441, CVE-2024-50629 and CVE-2024-10445. For the DSM 7.2.2 branch, Synology-SA-24:20 specifies 7.2.2-72806 Update 1 or later as the fixed release. The assessment profile uses Update 10 and does not claim that these historical issues remain unpatched. No physical device was tested. The configuration scope and qualitative rating rationale are part of this assessment and must be retained with the selected values. References: [https://www.synology.com/en-global/company/news/article/DS1520Plus_PR Official launch: DS1520+] [https://global.download.synology.com/download/Document/Hardware/DataSheet/DiskStation/20-year/DS1520%2B/enu/Synology_DS1520_Plus_Data_Sheet_enu.pdf DS1520+ official datasheet (hardware/security)] [https://www.synology.com/en-global/releaseNote/DSM?model=DS1520%2B DS1520+ DSM release history] [https://www.synology.com/en-global/products/status Synology product availability and support status] [https://www.synology.com/en-global/security/advisory/Synology_SA_24_20 Synology-SA-24:20 — DSM vulnerabilities and fixes] [https://www.synology.com/en-global/security/advisory/Synology_SA_24_27 Synology-SA-24:27 — additional DSM vulnerability history] [https://www.synology.com/en-global/company/news/article/BruteForce Synology PSIRT — StealthWorker attacks, 2021-08-04] [https://kb.synology.com/en-global/DSM/tutorial/How_to_reset_my_Synology_NAS_7 Synology physical reset and its security effects] [https://kb.synology.com/en-us/DSM/help/DSM/AdminCenter/file_share_privilege_nfs?version=7 DSM NFS permissions — AUTH_SYS and Kerberos] [https://global.download.synology.com/download/Document/Software/UserGuide/Os/DSM/7.2/enu/Syno_UsersGuide_NAServer_7_2_enu.pdf DSM 7.2 official user guide (PDF)] [https://kb.synology.com/en-global/DSM/help/DSM/AdminCenter/file_share_create?version=7 DSM shared-folder creation — optional encryption] [https://www.synology.com/en-global/dsm/7.2/software_spec/dsm DSM 7.2 technical specifications — accounts and services] [https://kb.synology.com/en-global/DSM/help/DSM/AdminCenter/connection_security_protection?version=7 DSM Auto Block — failed-login limits] [https://kb.synology.com/en-global/DSM/help/DSM/MainMenu/security?version=7 DSM personal security — login history] [https://kb.synology.com/en-global/DSM/help/DSM/AdminCenter/file_user_advanced?version=7 DSM password strength and forced-change settings] [https://fehmijaafar.net/wiki-iot/index.php/Methodology WikiIoT methodology]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
