CVE-2015-9254: Datto Alto 2 Firmware

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Datto ALTO and SIRIS devices have a default VNC password.

Affected products

• Datto Alto 2 Firmware: affected versions not specified
• Datto Alto 3 Firmware: affected versions not specified
• Datto Alto Imaged Firmware: affected versions not specified
• Datto Alto Xl Firmware: affected versions not specified
• Datto Siris 2 Firmware: affected versions not specified
• Datto Siris 3 Firmware: affected versions not specified
• Datto Siris 3 X All-Flash Firmware: affected versions not specified
• Datto Siris Virtual Firmware: affected versions not specified

Published 2018-02-20. Last modified 2026-06-17.