Approved changes feed: RSS · Atom

cpe:2.3:a:datto:windows_agent:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDatto (2745f805-7eee-560b-8d19-80bf2774dfc7)
ProductWindows Agent (cc174d35-a2be-5e6c-ac79-1009f6418f6a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-16674 vulnerable 2026-06-03 14:36:48.264613 Details available
Datto Windows Agent allows unauthenticated remote command execution via a modified command in conjunction with CVE-2017-16673 exploitation, aka an attack with a malformed primary whitelisted command and a secondary non-whitelisted command. This affects Datto Windows Agent (DWA) 1.0.5.0 and earlier. In other words, an attacker could combine this "primary/secondary" attack with the CVE-2017-16673 "rogue pairing" attack to achieve unauthenticated access to all agent machines running these older DWA versions.
Published: 2017-11-09T04:00:00.000Z
Updated: 2024-09-17T03:58:37.251Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.