PT-2013-6167 · Cru · Cru Ditto Forensic Fieldstation

Martin Wundram · Publicado 2013-12-17 · Atualizado 2014-01-14 · CVE-2013-6883

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CRU Ditto Forensic FieldStation versions prior to 2013Oct15a

Description A cross-site request forgery issue allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings.

Recommendations For versions prior to 2013Oct15a, update the firmware to version 2013Oct15a or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2013-6883

Produtos afetados

Cru Ditto Forensic Fieldstation

Referências · 9

• 🔥 https://exploit-db.com/exploits/30396 · Exploit
• 🔥 http://exploit-db.com/exploits/30396 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2013/Dec/80 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-6883 · Nota de Segurança
• http://cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013oct15a · Nota
• http://osvdb.org/100999 · Nota
• http://cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013jun30a · Nota
• http://secunia.com/advisories/55989 · Nota
• http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html · Nota