critical9.8
CVE-2015-2081
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.
Impact
Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Datto | Alto 3 Firmware | All versions |
| Datto | Alto 2 Firmware | All versions |
| Datto | Alto Xl Firmware | All versions |
| Datto | Siris 3 Firmware | All versions |
| Datto | Siris 2 Firmware | All versions |
| Datto | Siris 3 X All-Flash Firmware | All versions |
| Datto | Siris Virtual Firmware | All versions |
| Datto | Alto Imaged Firmware | All versions |