CVE-2015-9255

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...

CVE-2015-9256

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...

CVE-2015-9256: Exposure of Sensitive Information to an Unauthorized Actor

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...

CVE-2015-2081: Improper Input Validation

Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...

CVE-2015-9255: Exposure of Sensitive Information to an Unauthorized Actor

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...

CVE-2015-9254: Use of Hard-coded Credentials

Datto ALTO and SIRIS devices have a default VNC password...