CVE-2015-9254

Published: Feb 20, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Datto ALTO and SIRIS devices have a default VNC password.

Affected (8)

Products: Datto: Alto 3 Firmware, Alto 2 Firmware, Alto Xl Firmware, Siris 3 Firmware, Siris 2 Firmware, Siris 3 X All Flash Firmware, Siris Virtual Firmware, Alto Imaged Firmware

8 products

Alto 3 Firmware

Alto 2 Firmware

Alto Xl Firmware

Siris 3 Firmware

Siris 2 Firmware

Siris 3 X All Flash Firmware

Siris Virtual Firmware

Alto Imaged Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Datto Alto 3 Firmware	All versions

Running on/with	Platform Versions
Datto Alto 3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Datto Alto 2 Firmware	All versions

Running on/with	Platform Versions
Datto Alto 2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Datto Alto Xl Firmware	All versions

Running on/with	Platform Versions
Datto Alto Xl	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Datto Siris 3 Firmware	All versions

Running on/with	Platform Versions
Datto Siris 3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Datto Siris 2 Firmware	All versions

Running on/with	Platform Versions
Datto Siris 2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Datto Siris 3 X All Flash Firmware	All versions

Running on/with	Platform Versions
Datto Siris 3 X All Flash	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Datto Siris Virtual Firmware	All versions

Running on/with	Platform Versions
Datto Siris Virtual	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Datto Alto Imaged Firmware	All versions

Running on/with	Platform Versions
Datto Alto Imaged	All versions

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

http://www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.html

Source: cve@mitre.org

Third Party Advisory

http://www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.