CVE-2015-2081

Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-02-20

Last modified

2024-08-06

Weaknesses

CWE-20

Affected products

• Alto 2 Firmware (Datto)
• Alto 3 Firmware (Datto)
• Alto Imaged Firmware (Datto)
• Alto Xl Firmware (Datto)
• Siris 2 Firmware (Datto)
• Siris 3 Firmware (Datto)
• Siris 3 X All-flash Firmware (Datto)
• Siris Virtual Firmware (Datto)

References

• http://www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.html