Shellshock DHCP Remote Code Execution – Proof of Concept
I believe there will be plenty of linux NASs that will be vulnerable for the forseeable future. NASs are usually bigger and more functional than routers, they tend to run a more full system. Many of these for exampe run bash as far as I remember: <a href="http://www.amazon.com/s/field-keywords=QNAP" rel="nofollow">http://www.amazon.com/s/field-keywords=QNAP</a>