Info DS418Play Hacked at Pwn2Own

Currently reading
Info DS418Play Hacked at Pwn2Own

DS418play, DS213j, DS3621+, DSM 7.0.4-11091
O boy... am I excited 🤪

"The final entry of day two was filled with drama as the DEVCORE team targeted the Synology DiskStation DS418Play NAS. Their first attempt failed, and their second try needed more than three and a half minutes before their elegant heap overflow provided them with root access to the server. Their effort earns them $20,000 and 2 Master of Pwn points."
Zero Day Initiative — Pwn2Own Tokyo (Live from Toronto) - Day Two Results

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Log in

Already have an account? Log in here.

Welcome to! is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!