CVE-2015-9255 Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.
MediumCVSS 5.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| datto alto 3 firmware | All versions | No fix listed |
| datto alto 2 firmware | All versions | No fix listed |
| datto alto xl firmware | All versions | No fix listed |
| datto siris 3 firmware | All versions | No fix listed |
| datto siris 2 firmware | All versions | No fix listed |
| datto siris 3 x all-flash firmware | All versions | No fix listed |
| datto siris virtual firmware | All versions | No fix listed |
| datto alto imaged firmware | All versions | No fix listed |
References
- www.information-paradox.net third-party-advisory