Datto Siris 3 X All-flash Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Datto Siris 3 X All-flash Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2015-2081 — CVSS 9.8 (critical): Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.
• CVE-2015-9254 — CVSS 9.8 (critical): Datto ALTO and SIRIS devices have a default VNC password.
• CVE-2015-9255 — CVSS 5.3 (medium): Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and…
• CVE-2015-9256 — CVSS 5.3 (medium): Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because…