PatchTheCVE: siris 2 firmwarehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2015-9256: Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM rehttps://patchthecve.com/cve/CVE-2015-9256.htmlhttps://patchthecve.com/cve/CVE-2015-9256.htmlWed, 17 Jun 2026 00:36:09 +0000MEDIUM 5.3: Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.CVE-2015-9255: Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versihttps://patchthecve.com/cve/CVE-2015-9255.htmlhttps://patchthecve.com/cve/CVE-2015-9255.htmlWed, 17 Jun 2026 00:36:09 +0000MEDIUM 5.3: Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.CVE-2015-9254: Datto ALTO and SIRIS devices have a default VNC password.https://patchthecve.com/cve/CVE-2015-9254.htmlhttps://patchthecve.com/cve/CVE-2015-9254.htmlWed, 17 Jun 2026 00:36:08 +0000CRITICAL 9.8: Datto ALTO and SIRIS devices have a default VNC password.CVE-2015-2081: Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.https://patchthecve.com/cve/CVE-2015-2081.htmlhttps://patchthecve.com/cve/CVE-2015-2081.htmlWed, 17 Jun 2026 00:23:34 +0000CRITICAL 9.8: Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.