Vendor/product archive

cru-inc / ditto_forensic_fieldstation CVEs

Beta · best-effort

4 CVEs tagged to cru-inc / ditto_forensic_fieldstation — 2 Critical, 0 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to cru-inc vendor archive

CVE-2013-6884

Published Jan 7, 2014

The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges.

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2013-6881

Published Jan 7, 2014

CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip c…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2013-6883

Published Dec 17, 2013

Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administ…

CVSS 6.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2013-6882

Published Dec 17, 2013

Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote attackers to inject arbitrary web scri…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1