Datto Siris 2 Firmware
4 CVEs affecting Datto Siris 2 Firmware. Latest disclosed: 2018-02-20. Critical: 2, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9254 | Critical | 9.8 | 2018-02-20 | Datto ALTO and SIRIS devices have a default VNC password. |
CVE-2015-2081 | Critical | 9.8 | 2018-02-20 | Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts. |
CVE-2015-9256 | Medium | 5.3 | 2018-02-20 | Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs… |
CVE-2015-9255 | Medium | 5.3 | 2018-02-20 | Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a re… |