Synology DiskStation DS224+

Synology DiskStation DS224+
Security Grade A- Calculator v	Synology DiskStation DS224+ Brand: Synology (Parent: Synology Inc.) Category: Computer • Model / Gen: DS224+ Release Date: 2023-08-09 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Qualitative rating: physical RESET access can reset admin credentials and disable 2FA. Retain-password settings and physical access controls matter; incident frequency is not quantified.
Known vulnerabilities	Rare	[1] 🔗 Proof	Older DSM builds have published flaws including CVE-2024-10441 and CVE-2025-13392. Apply the listed fixed releases; disclosure is not proof that a patched unit remains vulnerable.
Prior attacks	Rare	🔗 Proof	DSM has documented controlled research exploits at Pwn2Own 2024. This is platform-level evidence, not a claim of a DS224+ field infection; prevalence is not quantified.
Updatability	Very common	🔗 Proof	DS224+ is listed with full DSM update support. Install supported DSM and package updates; product sales status and software support are different.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	AD/LDAP and Kerberos authentication are supported, but anonymous FTP and UNIX-style NFS are configurable. Authentication is not universal across every service.
Communications	Encrypted with up-to-date encryption	🔗 Proof	TLS 1.2/1.3, SFTP and SMB3 encryption are available. Rating assumes encrypted services and appropriate cipher profiles; disable legacy and plaintext alternatives.
Storage	Encrypted with up-to-date encryption	🔗 Proof	Shared folders support AES-256 encryption when enabled. Rating covers encrypted folders; it does not assume every folder or volume is encrypted by default.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	Local users, groups, folder ACLs and application permissions support managed access and least privilege; administrators can create and delete accounts.
Authentication	Secure	🔗 Proof	DSM supports password plus OTP, approved sign-in or hardware security key when 2FA is enabled. Administrators can enforce 2FA; service coverage varies.
Brute-force protection	Exist	🔗 Proof	Auto Block and Account Protection provide configurable failed-login limits and client lockouts. Protection must be enabled and its thresholds configured.
Event logging	Access event logged	🔗 Proof	Log Center collects and exports logs. File-service transfer logging records selected operations when enabled; review and retain the relevant access logs.
Passwords	Require change after setup with complexity requirements	🔗 Proof	Administrators can enforce password strength, expiry and password changes at next login. Rating assumes these policies are enabled; enforcement is configurable.
Category Score	Score: 1 / 3

Technical Specifications

Property	Details
Operating System & App	Synology DiskStation Manager (DSM) (Companion App: DS finder; DS file; Synology Drive)
Hardware (CPU / GPU)	CPU: Intel Celeron J4125; 4 cores; 2.0 GHz base / 2.7 GHz burst • GPU:
Memory & Storage	Memory: 2 GB DDR4 non-ECC; expandable to 6 GB • Storage: 2 bays for 3.5-inch SATA HDDs or 2.5-inch SATA SSDs; drives sold separately
Power, Battery & Charging	Battery: No battery-powered operation; external AC adapter • Power: 60 W adapter; 100–240 V AC, 50/60 Hz; typical access consumption 14.69 W • Charging:
Display & Camera	Display: Status and drive LEDs • Camera:
Sound & Connectivity	Sound: System alert buzzer • Connectivity: 2 × Gigabit Ethernet; 2 × USB 3.2 Gen 1
Physical (Dimensions & Mass)	Dimensions: 165 × 108 × 232.2 mm (H × W × D) • Mass: 1.30 kg (without drives)

Documentation-based assessment as of 18 October 2026. Device type: network-attached storage (NAS), filed under Computer. This assessment describes documented DSM 7.3 capabilities and assumes supported security patches, encrypted services/folders, 2FA, Auto Block and password policies are configured. No physical device or installed firmware was tested. Published DSM research exploits are distinguished from model-specific field incidents. None/Rare/Very common are qualitative selections, not measured incident rates. Sales status follows Synology's US listing; availability may differ by region. Full DSM update support is documented.