2014-01-06

2014-01-07

2014-01-08

All (2) Critical (2) High (1) Medium (2) Low (3)

CVE-2013-6881 CRITICAL POC THREAT Emergency

CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 37.9%.

Command Injection Ditto Forensic Fieldstation Firmware Ditto Forensic Fieldstation

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

37.9%

Threat

4.6

CVE-2013-6884 CRITICAL POC THREAT Emergency

The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 30.1%.

Authentication Bypass Ditto Forensic Fieldstation Firmware Ditto Forensic Fieldstation

NVD Exploit-DB

CVSS 2.0

10.0

EPSS

30.1%

Threat

4.4