EUVD-2015-9099

Malware in sbrugna...

EUVD-2015-9098

Malware in sbrugna...

EUVD-2015-2191

Malware in sbrugna...

CVE-2015-9254

Datto ALTO and SIRIS devices have a default VNC password...

CVE-2015-9255

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...

Default credentials

Datto ALTO and SIRIS devices have a default VNC password...

Default credentials

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...

Directory traversal

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...

CVE-2015-2081

Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...

CVE-2015-9254

Datto ALTO and SIRIS devices have a default VNC password...

CVE-2015-9255

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...

CVE-2015-9256

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...

CVE-2015-2081

Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...

Remote code execution

Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...

CVE-2015-2081

Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts...

CVE-2015-9254

Datto ALTO and SIRIS devices have a default VNC password...

CVE-2015-9255

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory...

CVE-2015-9256

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default...

CVE-2015-2081

Datto ALTO and SIRIS devices are affected by CVE-2015-2081, allowing Remote Code Execution via unauthenticated requests to PHP scripts. This vulnerability is documented in the NVD entry for CVE-2015-2081, which lists Datto ALTO and SIRIS as the affected products and describes the attack as unauth...

CVE-2015-9255

Datto ALTO and SIRIS devices are affected by CVE-2015-9255 through a web app Web Virtual Directory exposure that allows remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines. The root cause is information disclosure via an accessible W...