Skip to content
Noroxi

datto records

6 published records for vendor datto.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2015-2081
    40Plan

    Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.

    CriticalCVSS 9.8No exploitEPSS 2%

    datto · alto 3 firmwareFeb 20, 2018

  • CVE-2015-9254
    39Monitor

    Datto ALTO and SIRIS devices have a default VNC password.

    CriticalCVSS 9.8No exploitEPSS 1%

    datto · alto 3 firmwareFeb 20, 2018

  • CVE-2017-16674
    32Monitor

    Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation,

    HighCVSS 8.0No exploitEPSS 0%

    datto · windows agentNov 9, 2017

  • CVE-2015-9255
    21Monitor

    Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtua

    MediumCVSS 5.3No exploitEPSS 1%

    datto · alto 3 firmwareFeb 20, 2018

  • CVE-2015-9256
    21Monitor

    Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because th

    MediumCVSS 5.3No exploitEPSS 1%

    datto · alto 3 firmwareFeb 20, 2018

  • CVE-2017-16673
    21Monitor

    Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections.

    MediumCVSS 5.3No exploitEPSS 0%

    datto · backup agentNov 9, 2017