Medium severity5.3NVD Advisory· Published Feb 20, 2018· Updated Jun 17, 2026
CVE-2015-9255
CVE-2015-9255
Description
Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10- cpe:2.3:o:datto:alto_3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:datto:alto_2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:datto:alto_xl_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:datto:siris_3_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:datto:siris_2_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:datto:siris_3_x_all-flash_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:datto:siris_virtual_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:datto:alto_imaged_firmware:-:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- www.information-paradox.net/2015/02/cve-2015-2081-multiple-vulnerabilities.htmlnvdThird Party Advisory
News mentions
0No linked articles in our index yet.