packetstormsecurity.com
http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html CVE-2013-6884
Ditto Forensic FieldStation 2013Oct15a - Multiple Vulnerabilities
Record summary
CVE-2013-6884 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.
Description
The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBDitto Forensic FieldStation 2013Oct15a - Multiple VulnerabilitiesExploitDB exploitby Martin WundramNot analyzed1 file
References
720131212 Ditto Forensic FieldStation, multiple vulnerabilitiesmailing list
http://seclists.org/fulldisclosure/2013/Dec/80 55989Third-party advisory
http://secunia.com/advisories/55989 cru-inc.com
http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013jun30a cru-inc.com
http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013oct15a 30396exploit
http://www.exploit-db.com/exploits/30396 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2013-6884