100999vdb entry
http://osvdb.org/100999 CVE-2013-6883
Ditto Forensic FieldStation 2013Oct15a - Multiple Vulnerabilities
Record summary
CVE-2013-6883 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.
Description
Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via unspecified vectors.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBDitto Forensic FieldStation 2013Oct15a - Multiple VulnerabilitiesExploitDB exploitby Martin WundramNot analyzed1 file
References
8packetstormsecurity.com
http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html 20131212 Ditto Forensic FieldStation, multiple vulnerabilitiesmailing list
http://seclists.org/fulldisclosure/2013/Dec/80 55989Third-party advisory
http://secunia.com/advisories/55989 cru-inc.com
http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013jun30a cru-inc.com
http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013oct15a 30396exploit
http://www.exploit-db.com/exploits/30396 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-6883