CVE-2013-6883

2013-12-1716:08:51

CWE-352

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.013

Percentile

85.8%

JSON

Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via unspecified vectors.

Affected configurations

Nvd

Node

cru-incditto_forensic_fieldstation_firmwareRange≤2013oct15a

AND

cru-incditto_forensic_fieldstationMatch-

VendorProductVersionCPE
cru-incditto_forensic_fieldstation_firmware*cpe:2.3:o:cru-inc:ditto_forensic_fieldstation_firmware:*:*:*:*:*:*:*:*
cru-incditto_forensic_fieldstation-cpe:2.3:h:cru-inc:ditto_forensic_fieldstation:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cru-inc	ditto_forensic_fieldstation_firmware	*	cpe:2.3:o:cru-inc:ditto_forensic_fieldstation_firmware::::::::
cru-inc	ditto_forensic_fieldstation	-	cpe:2.3:h:cru-inc:ditto_forensic_fieldstation:-:::::::*