What’s Vulnerable › Vulnerabilities

CVE-2013-6883

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2013-12-17 · updated 2026-06-17
• Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via unspecified vectors.

Affected products

• Cru-Inc Ditto Forensic Fieldstation: all versions
• Cru-Inc Ditto Forensic Fieldstation Firmware: through 2013oct15a

References

• http://osvdb.org/100999
• http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html
• http://seclists.org/fulldisclosure/2013/Dec/80
• http://secunia.com/advisories/55989
• http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013jun30a
• http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013oct15a
• http://www.exploit-db.com/exploits/30396
• http://osvdb.org/100999
• http://packetstormsecurity.com/files/124420/Ditto-Forensic-FieldStation-2013Oct15a-XSS-CSRF-Command-Execution.html
• http://seclists.org/fulldisclosure/2013/Dec/80
• http://secunia.com/advisories/55989
• http://www.cru-inc.com/support/software-downloads/ditto-firmware-updates/ditto-firmware-release-notes-2013jun30a

Get alerted when CVE-2013-6883 or the next vulnerability affects your stack