CVE-2015-9256 Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.
MediumCVSS 5.3
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| datto alto 3 firmware | All versions | No fix listed |
| datto alto 2 firmware | All versions | No fix listed |
| datto alto xl firmware | All versions | No fix listed |
| datto siris 3 firmware | All versions | No fix listed |
| datto siris 2 firmware | All versions | No fix listed |
| datto siris 3 x all-flash firmware | All versions | No fix listed |
| datto siris virtual firmware | All versions | No fix listed |
| datto alto imaged firmware | All versions | No fix listed |
References
- www.information-paradox.net third-party-advisory