Approved changes feed: RSS · Atom

cpe:2.3:a:datto:backup_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDatto (2745f805-7eee-560b-8d19-80bf2774dfc7)
ProductBackup Agent (7abb2a06-b4d1-557b-a588-52dc6f8a211b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16673 vulnerable 2026-06-03 14:36:48.262750 Details available
Datto Backup Agent 1.0.6.0 and earlier does not authenticate incoming connections. This allows an attacker to impersonate a Datto Backup Appliance to "pair" with the agent and issue requests to this agent, if the attacker can reach the agent on TCP port 25566 or 25568, and send unspecified "specific information" by which the agent identifies a network device that is "appearing to be a valid Datto."
Published: 2017-11-09T04:00:00.000Z
Updated: 2024-09-16T20:37:56.539Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.