CVEvulnerability
CVE-2013-6883
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via unspecified vectors.
Affected configurations
• cru-inc ditto forensic fieldstation firmware (<= 2013oct15a)
• cru-inc ditto forensic fieldstation
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://osvdb.org/100999 osvdb.org
- http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2013/Dec/80 Exploit
- http://secunia.com/advisories/55989 secunia.com
- http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013jun30a www.cru-inc.com
- http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013oct15a www.cru-inc.com
- http://www.exploit-db.com/exploits/30396 www.exploit-db.com
- http://osvdb.org/100999 osvdb.org
- http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html packetstormsecurity.com
- http://seclists.org/fulldisclosure/2013/Dec/80 Exploit
- http://secunia.com/advisories/55989 secunia.com
- http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013jun30a www.cru-inc.com
- http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013oct15a www.cru-inc.com
- http://www.exploit-db.com/exploits/30396 www.exploit-db.com