NAS vulnerabilities