CVE-2015-9256: Datto Alto 2 Firmware

Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days.

Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default.

Affected products

• Datto Alto 2 Firmware: affected versions not specified
• Datto Alto 3 Firmware: affected versions not specified
• Datto Alto Imaged Firmware: affected versions not specified
• Datto Alto Xl Firmware: affected versions not specified
• Datto Siris 2 Firmware: affected versions not specified
• Datto Siris 3 Firmware: affected versions not specified
• Datto Siris 3 X All-Flash Firmware: affected versions not specified
• Datto Siris Virtual Firmware: affected versions not specified

Published 2018-02-20. Last modified 2026-06-17.