CVE-2015-2081: Datto Alto 2 Firmware

Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days.

Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts.

Affected products

• Datto Alto 2 Firmware: affected versions not specified
• Datto Alto 3 Firmware: affected versions not specified
• Datto Alto Imaged Firmware: affected versions not specified
• Datto Alto Xl Firmware: affected versions not specified
• Datto Siris 2 Firmware: affected versions not specified
• Datto Siris 3 Firmware: affected versions not specified
• Datto Siris 3 X All-Flash Firmware: affected versions not specified
• Datto Siris Virtual Firmware: affected versions not specified

Published 2018-02-20. Last modified 2026-06-17.