EUVD-2017-7857

Malware in sbrugna...

CVE-2017-16673

Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified...

Datto Backup Agent Forgery Vulnerability

Datto Backup Agent is a set of data backup agent software from Datto Inc. in the United States. A forgery vulnerability exists in Datto Backup Agent version 1.0.6.0 and earlier. An attacker can exploit this vulnerability to spoof the Datto Backup Appliance and send requests to the agent...

Datto Windows Agent Remote Code Execution Vulnerability

Datto Windows Agent suffers from multiple remote code execution vulnerabilities. Credits ======= Brian Vincent, Michael Brumlow Software ======== Datto Windows Agent Vulnerability Details ===================== Discovered: Aug 25, 2017 Type: Remote code execution as LocalSystem Severity: Critical...

CVE-2017-16673

Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified...

CVE-2017-16673

Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified...

CVE-2017-16673

Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified...

CVE-2017-16673: Exposure of Sensitive Information to an Unauthorized Actor

Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified...

PT-2017-14516

Name of the Vulnerable Software and Affected Versions Datto Backup Agent versions 1.0.6.0 and earlier Description The issue allows an attacker to impersonate a Datto Backup Appliance and issue requests to the agent if the attacker can reach the agent on TCP port 25566 or 25568 and send specific...