PatchTheCVEdatto vulnerabilities
Recent CVEs affecting datto products. 6 tracked.
datto has 6 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2018-02-20. Highest priority: CVE-2015-2081 (score 61/100).
- CVE-2017-16674 HIGH 8.0 UPGRADE Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with
- CVE-2017-16673 MEDIUM 5.3 UPGRADE Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections
- CVE-2015-9256 MEDIUM 5.3 MITIGATE MITIGATE Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM re
- CVE-2015-9255 MEDIUM 5.3 MITIGATE MITIGATE Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versi
- CVE-2015-9254 CRITICAL 9.8 MITIGATE MITIGATE Datto ALTO and SIRIS devices have a default VNC password.
- CVE-2015-2081 CRITICAL 9.8 MITIGATE MITIGATE Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.
FAQ
How do I fix datto vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is datto being exploited right now?
None of the tracked datto CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which datto CVE should I patch first?
CVE-2015-2081 currently ranks highest (61/100): Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts..