medium5.3
CVE-2015-9256
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs…
Impact
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Datto | Alto 3 Firmware | All versions |
| Datto | Alto 2 Firmware | All versions |
| Datto | Alto Xl Firmware | All versions |
| Datto | Siris 3 Firmware | All versions |
| Datto | Siris 2 Firmware | All versions |
| Datto | Siris 3 X All-Flash Firmware | All versions |
| Datto | Siris Virtual Firmware | All versions |
| Datto | Alto Imaged Firmware | All versions |