Synology DS218+ (DS218+)

Synology DS218+ (DS218+)
Security Grade B Calculator v	Synology DS218+ Brand: Synology (Parent: Synology Incorporated) Category: NAS • Model / Gen: DiskStation DS218+ Release Date: 2017-01-01 • Status: End of sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Metal/plastic chassis with drive trays and screws; no public mass-tampering campaign found for this model.
Known vulnerabilities	Rare	🔗 Proof	No DS218+-specific CVE was found in the quick check; DSM platform advisories may affect the device depending on version. Verify the installed DSM build.
Prior attacks	Rare	🔗 Proof	NAS devices, including Synology, are targeted by ransomware campaigns; no DS218+-specific mass exploitation was found.
Updatability	Very common	🔗 Proof	Synology provides DSM updates and security advisories; this older model may have a shorter support window, so check the latest available DSM.
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	DSM supports local accounts, groups and optional LDAP/AD integration; no universal mutual authentication with third-party systems.
Communications	Encrypted with up-to-date encryption	🔗 Proof	DSM supports HTTPS/TLS for management and file services; default deployment should be checked for HTTP redirects and certificate validity.
Storage	No encryption	🔗 Proof	Shared-folder encryption is optional in DSM and not enabled by default; disks are not encrypted at rest unless the administrator configures it.
Category Score	Score: 2 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	DSM provides multiple users, groups, roles and permission management.
Authentication	Basic	🔗 Proof	Password login is the default; 2FA is available but not mandatory.
Brute-force protection	Basic	🔗 Proof	DSM offers auto-block and account protection, but it is configurable and not guaranteed by default.
Event logging	Access event logged	🔗 Proof	DSM logs login and file-access events; retention and central export depend on configuration.
Passwords	Require change after setup	🔗 Proof	The administrator sets the account password during setup; complexity and expiry are configurable rather than enforced universally.
Category Score	Score: 2 / 3

Technical Specifications

Property	Details
Operating System & App	Synology DSM (Companion App: Synology DS finder)
Hardware (CPU / GPU)	CPU: • GPU:
Memory & Storage	Memory: • Storage:
Power, Battery & Charging	Battery: • Power: • Charging:
Display & Camera	Display: • Camera:
Sound & Connectivity	Sound: • Connectivity: 2x Gigabit Ethernet, USB 3.0
Physical (Dimensions & Mass)	Dimensions: • Mass:

Synology DS218+ is a two-bay NAS running DSM. It provides centralized accounts, file services, HTTPS management and optional shared-folder encryption. The rating reflects a maintained platform with configurable security controls, but default storage encryption is off and the device is an attractive ransomware target.