QNAP TS-231K (TS-231K)

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	[https://docs.qnap.com/operating-system/qts/5.2.x/en-us/basic-system-reset-797415BA.html https://www.qnap.com/en/product/ts-231k/specs/hardware 🔗 Proof]	Physical reset and removable drives create a local tampering surface; the rating concerns exposure, not measured attack frequency.
Known vulnerabilities	Rare	[https://www.qnap.com/en/security-advisory/qsa-23-01 https://www.qnap.com/en/release-notes/qts/5.0.1.2194/20221022 🔗 Proof]	CVE-2022-27596 affected QTS 5.0.1 before the cited fix; the model appears in an affected-build applicability list.
Prior attacks	Rare	[https://www.qnap.com/en-us/security-advisory/qsa-22-24 https://www.qnap.com/en-us/security-advisory/qsa-22-02 🔗 Proof]	DeadBolt campaigns are documented for the QNAP NAS platform; exact victims are not identified by model in these sources.
Updatability	Very common	[https://www.qnap.com/en-au/release-notes/qts/5.2.8.3350/20251216 https://www.qnap.com/en/release-notes/qts/5.2.10.3568/20260722 🔗 Proof]	The model is listed for QTS maintenance releases in December 2025 and July 2026.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	NFS AUTH_SYS provides host/user identity checks without requiring Kerberos mutual authentication in this configuration.
Communications	No encryption	[https://docs.qnap.com/operating-system/qts/5.2.x/en-us/configuring-system-administration-settings-F6C72493.html https://docs.qnap.com/operating-system/qts/5.2.x/en-us/configuring-nfs-service-settings-4A850D3A.html 🔗 Proof]	HTTP management and NFS AUTH_SYS remain enabled in this configuration; these plaintext paths are not protected by optional HTTPS.
Storage	No encryption	[https://docs.qnap.com/operating-system/qts/5.2.x/en-us/creating-a-static-volume-CF6B5E4A.html https://www.qnap.com/en/product/ts-231k/specs/hardware 🔗 Proof]	The assessed user-data volume and share on internal SATA SSD flash are unencrypted, with no SED locking enabled.
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	[https://docs.qnap.com/operating-system/qts/5.2.x/en-us/creating-a-local-user-A3835C8C.html https://docs.qnap.com/operating-system/qts/5.2.x/en-us/deleting-users-926E2A50.html https://docs.qnap.com/operating-system/qts/5.2.x/en-us/password-management-CFF9F245.html 🔗 Proof]	QTS supports restricted local users, group/application permissions, user removal and password changes.
Authentication	Basic	[https://docs.qnap.com/operating-system/qts/5.2.x/en-us/basic-system-reset-797415BA.html https://docs.qnap.com/operating-system/qts/5.2.x/en-us/password-management-CFF9F245.html 🔗 Proof]	Password-only login is assessed; the retained physical reset permits documented administrator account recovery.
Brute-force protection	Exist	🔗 Proof	HTTP(S) IP access protection is enabled and blocks clients after the configured failed-login limits.
Event logging	Access event logged	[https://docs.qnap.com/operating-system/qts/5.2.x/en-us/local-access-logs-8761937.html https://docs.qnap.com/operating-system/qts/5.2.x/en-us/configuring-access-log-settings-189F8A00.html 🔗 Proof]	QuLog Center access logging is enabled for HTTP(S), with a valid log destination in the assessed configuration.
Passwords	Require change after setup with complexity requirements	[https://docs.qnap.com/operating-system/qts/5.2.x/en-us/creating-a-local-user-A3835C8C.html https://docs.qnap.com/operating-system/qts/5.2.x/en-us/configuring-the-password-policy-BDEDEB1D.html 🔗 Proof]	New local users must replace temporary passwords at first logon; the stated 12-character mixed-case/digit policy is enforced.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	QNAP QTS; assessment: 5.2.10.3568 build 20260722 (Companion App: )
Hardware (CPU / GPU)	CPU: AnnapurnaLabs, an Amazon company Alpine AL214, 4-core, 1.7GHz • GPU:
Memory & Storage	Memory: 1GB DDR3 • Storage: 2 × SATA drive bays; compatible with 2.5-inch SATA SSDs; drives sold separately. System flash: 512 MB (Dual boot OS protection)
Power, Battery & Charging	Battery: • Power: 60W/65W adapter (12VDC), 100-240VAC • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: Gigabit Ethernet Port (RJ45): 2; USB 3.2 Gen 1 port: 2
Physical (Dimensions & Mass)	Dimensions: 165 × 102 × 220.6 mm • Mass:

Documentation-based security assessment: QNAP TS-231K. Reviewed 2026-10-25.

Documentation-based assessment of a defined QTS 5.2.10.3568 build 20260722 local-NAS configuration, not a factory-default or physical-test report. It uses native local users, password-only login, LAN HTTP management and an NFS AUTH_SYS share. Compatible internal SATA SSDs, with required mounting adapters, contain an unencrypted static user-data volume and an unencrypted shared folder; SED locking is not enabled. HTTP(S) IP access protection is enabled with configured failed-login and time limits. QuLog Center access logging is enabled for HTTP(S), with a destination on an unencrypted volume retaining more than 10 percent free space. The local password policy requires at least 12 characters, upper- and lower-case letters and digits, and newly created local users must change their temporary password at first logon. The documented physical basic-reset function is retained. These settings define the assessment case; no device was installed or tested.

Ratings map documented capabilities and the stated configuration to WikiIoT choices. Rare is a qualitative assessment of documented bounded exposure/history, not a measured frequency. Prior attacks is explicitly platform-level history; the sources do not identify each selected model as a confirmed victim, and some campaigns predate individual model releases. An enabled plaintext path is rated No encryption. Storage covers user data on internal SATA SSD flash, without inferring the state of every boot component. Optional capabilities are not treated as enabled unless the assessment configuration states so. Historical CVEs do not imply that the selected patched firmware remains vulnerable.

Release date: 2020-04-28; the date stated in the cited regional QNAP announcement. It is not asserted as the earliest worldwide sale date or a separately verified first-sale date for every RAM SKU.

Historical vulnerability examples: CVE-2022-27596. Affected scope: QTS 5.0.1 before 5.0.1.2234 build 20221201. The model is listed for historical QTS 5.0.1.2194. Fix and assessment scope: QTS 5.0.1.2234 build 20221201 and later fix the issue. The selected QTS 5.2.10.3568 profile is not claimed to retain this vulnerability.

No physical device was tested. These are documented configuration choices and qualitative rating judgments. Preserve this scope and the comments with the selected values.

References: launch TSx31K — official manufacturer source spec TS-231K — official manufacturer source QTS 5.2.10.3568 release notes and applicable models (2026-07-23) QTS 5.2 physical basic reset and administrator recovery QNAP QSA-23-01: CVE-2022-27596 and fixed versions QTS 5.0.1.2194 release notes and applicable models (historical affected version) QNAP QSA-22-24: September 2022 DeadBolt / Photo Station campaign QNAP QSA-22-02: January 2022 DeadBolt campaign QTS 5.2.8.3350 release notes and applicable models QTS 5.2 NFS AUTH_SYS and Kerberos security QTS 5.2 HTTP / HTTPS administration settings QTS 5.2 volume creation and optional AES-256 encryption QTS 5.2 local users and required first-login password change QTS 5.2 delete users QTS 5.2 password changes and account recovery QTS 5.2 IP access protection / failed-login blocking QTS 5.2 QuLog Center local access logs QTS 5.2 access logging: destination and connection-type settings QTS 5.2 password policy