← Back

Alto 2 Firmware

alto_2_firmware

Vendor: Datto • 4 CVEs

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Datto
8Alto 2 Firmware
Alto 3 FirmwareAlto Imaged Firmware+5 more
Nov 21, 2024
Feb 20, 2018
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.
1Datto
8Alto 2 Firmware
Alto 3 FirmwareAlto Imaged Firmware+5 more
Nov 21, 2024
Feb 20, 2018
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.
1Datto
8Alto 2 Firmware
Alto 3 FirmwareAlto Imaged Firmware+5 more
Nov 21, 2024
Feb 20, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Datto ALTO and SIRIS devices have a default VNC password.
1Datto
8Alto 2 Firmware
Alto 3 FirmwareAlto Imaged Firmware+5 more
Nov 21, 2024
Feb 20, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.