NetSight
IP …
medium6.8Public exploit code

CVE-2013-6883

Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authen…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via unspecified vectors.

Affected products

VendorProductAffected versions
Cru-IncDitto Forensic Fieldstation Firmware
through 2013oct15a
Cru-IncDitto Forensic Fieldstation
All versions

Weakness classification

CWE-352

References