CVE-2015-9255: Datto Alto 2 Firmware

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.

Affected products

• Datto Alto 2 Firmware: affected versions not specified
• Datto Alto 3 Firmware: affected versions not specified
• Datto Alto Imaged Firmware: affected versions not specified
• Datto Alto Xl Firmware: affected versions not specified
• Datto Siris 2 Firmware: affected versions not specified
• Datto Siris 3 Firmware: affected versions not specified
• Datto Siris 3 X All-Flash Firmware: affected versions not specified
• Datto Siris Virtual Firmware: affected versions not specified

Published 2018-02-20. Last modified 2026-06-17.