Datto

    Dashboard / Vendors

    Products: 18
    Vulnerabilities: 6
    Known Exploited: 0
    2
    Critical Level Threats
    1
    High Level Threats
    3
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2015-2081

    Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.

    Last Modified: Nov 21, 2024
    Published: Feb 20, 2018

    CVE-2015-9254

    Datto ALTO and SIRIS devices have a default VNC password.

    Last Modified: Nov 21, 2024
    Published: Feb 20, 2018

    CVE-2015-9255

    Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.

    Last Modified: Nov 21, 2024
    Published: Feb 20, 2018

    CVE-2015-9256

    Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.

    Last Modified: Nov 21, 2024
    Published: Feb 20, 2018

    CVE-2017-16674

    Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with a malformed primary whitelisted command and a secondary non-whitelisted command. This affects Datto Windows Agent (DWA) 1.0.5.0 and earlier. In other words, an attacker could combine this "primary/secondary" attack with the CVE-2017-16673 "rogue pairing" attack to achieve unauthenticated access to all agent machines running these older DWA versions.

    Last Modified: Apr 20, 2025
    Published: Nov 09, 2017
    Items Per Page