本ページは datto siris_virtual_firmware に影響する公開済み CVE（NVD の CPE 経由で関連付け）を列挙します。各行に深刻度指標・概要・公開日が含まれます。
| CVE | 概要 | ソース | CVSS 最大値 | EPSS（%） | 公開 | 更新 |
|---|---|---|---|---|---|---|
| CVE-2015-9256 | Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information via access to device/VM restore mount points, because they do not have ACLs by default. | [email protected] | 5.3 | 1.07% | 2018-02-20 | 2024-11-21 |
| CVE-2015-9255 | Datto ALTO and SIRIS devices allow remote attackers to obtain sensitive information about data, software versions, configuration, and virtual machines via a request to a Web Virtual Directory. | [email protected] | 5.3 | 1.07% | 2018-02-20 | 2024-11-21 |
| CVE-2015-9254 | Datto ALTO and SIRIS devices have a default VNC password. | [email protected] | 9.8 | 1.14% | 2018-02-20 | 2024-11-21 |
| CVE-2015-2081 | Datto ALTO and SIRIS devices allow Remote Code Execution via unauthenticated requests to PHP scripts. | [email protected] | 9.8 | 2.93% | 2018-02-20 | 2024-11-21 |