Approved changes feed: RSS · Atom

cpe:2.3:h:cru-inc:ditto_forensic_fieldstation:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorCru Inc (5ca7ba6e-f54a-525f-98b5-9165403ea7b0)
ProductDitto Forensic Fieldstation (0e135324-2c63-56d1-80a1-99399198e8a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6884 vulnerable 2026-06-08 05:05:07.239798 Details available
The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges.
Published: 2014-01-07T17:00:00.000Z
Updated: 2024-08-06T17:53:44.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6883 vulnerable 2026-06-08 05:05:07.239424 Details available
Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk erase technique settings via unspecified vectors.
Published: 2013-12-17T16:00:00.000Z
Updated: 2024-08-06T17:53:44.216Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6882 vulnerable 2026-06-08 05:05:07.239026 Details available
Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote attackers to inject arbitrary web script or HTML via the username parameter in a login or (2) remote authenticated users to inject arbitrary web script or HTML via unspecified form fields.
Published: 2013-12-17T16:00:00.000Z
Updated: 2024-08-06T17:53:44.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-6881 vulnerable 2026-06-08 05:05:07.238545 Details available
CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the forensic imaging task.
Published: 2014-01-07T17:00:00.000Z
Updated: 2024-08-06T17:53:45.456Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.