CVEs (4)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Datto 8Alto 2 Firmware Alto 3 FirmwareAlto Imaged Firmware+5 moreNov 21, 2024 Feb 20, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default. |
1Datto 8Alto 2 Firmware Alto 3 FirmwareAlto Imaged Firmware+5 moreNov 21, 2024 Feb 20, 2018 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory. |
1Datto 8Alto 2 Firmware Alto 3 FirmwareAlto Imaged Firmware+5 moreNov 21, 2024 Feb 20, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Datto ALTO and SIRIS devices have a default VNC password. |
1Datto 8Alto 2 Firmware Alto 3 FirmwareAlto Imaged Firmware+5 moreNov 21, 2024 Feb 20, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts. |