22 matches found
EUVD-2015-9099
Malware in sbrugna...
EUVD-2015-2191
Malware in sbrugna...
EUVD-2015-9098
Malware in sbrugna...
CVE-2015-9254
Datto ALTO and SIRIS devices have a default VNC password...
CVE-2015-9255
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...
Remote code execution
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...
Directory traversal
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...
Default credentials
Datto ALTO and SIRIS devices have a default VNC password...
CVE-2015-9255
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...
CVE-2015-9256
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...
Default credentials
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...
CVE-2015-9254
Datto ALTO and SIRIS devices have a default VNC password...
CVE-2015-2081
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...
CVE-2015-2081
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...
CVE-2015-9255
Datto ALTO and SIRIS devices are affected by CVE-2015-9255 through a web app Web Virtual Directory exposure that allows remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines. The root cause is information disclosure via an accessible W...
CVE-2015-9254
Datto ALTO and SIRIS devices have a default VNC password...
CVE-2015-2081
Datto ALTO and SIRIS devices are affected by CVE-2015-2081, allowing Remote Code Execution via unauthenticated requests to PHP scripts. This vulnerability is documented in the NVD entry for CVE-2015-2081, which lists Datto ALTO and SIRIS as the affected products and describes the attack as unauth...
CVE-2015-9254
CVE-2015-9254 affects Datto ALTO and SIRIS devices, where a default VNC password enables unauthenticated access to the devices. The root cause is the use of a default credential for VNC, allowing potential remote control or exposure of sensitive information via the VNC interface. Public reference...
CVE-2015-9256
CVE-2015-9256 affects Datto ALTO and SIRIS devices. The flaw arises because restore mount points (device/VM) are accessible without ACLs by default, enabling remote attackers to obtain sensitive information from these mounts. The connected records corroborate the issue’s existence and affected co...