Bug: ReadyNAS Surveillance App still active though turned off at app panel

[AGSowjet]

The preferences definitely say it's turned off, but I can still reach the admin panel on port 5100.

I guess for now, deinstallation is the only way to turn it off…

ReadyNAS 104, latest Firmware 6.6.0

[JennC]

Hello AGSowjet,

Do you mean the admin page for ReadyNAS Surveillance?

Perhaps uninstall the app then see if you get the same results.

Regards,

[AGSowjet]

Yes exactly. The NAS admin panel says it is off, but the admin page for ReadyNAS Surveillance can still be reached and I can still login with default username and password if not set up.

Of course, deinstallation deactivated the software completely.

But I'd say this is a security risk when software that was disabled by the admin in admin panel actually is still active on the ReadyNAS.

[JennC]

Hello AGSowjet,

Let me check this with the eng'g team first since I get the same result when I tested.

Thanks for your cooperation!

Regards,

[siigna]

Turning off Surveillance will shutdown the back-end Surveillance server, but the UI will still be served from the NAS' web server.  Even though the UI is available, with the back-end server shut off you shouldn't be able to make any settings changes.

I've filed a bug to improve this behavior and disable any app-related web configuration along with the service itself.