CVE-2013-6884

2014-01-0717:04:51

CWE-255

[email protected]

web.nvd.nist.gov

cru ditto forensic fieldstation

write-blocker

default credentials

remote attackers

nvd

cve-2013-6884

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.1 High

AI Score

Confidence

Low

0.029 Low

EPSS

Percentile

90.9%

JSON

The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default “ditto” username and password, which allows remote attackers to gain privileges.

Affected configurations

NVD

Node

cru-incditto_forensic_fieldstation_firmwareRange≤2013jun30a

AND

cru-incditto_forensic_fieldstationMatch-

CPENameOperatorVersion
cru-inc:ditto_forensic_fieldstation_firmwarecru-inc ditto forensic fieldstation firmwarele2013jun30a
cru-inc:ditto_forensic_fieldstationcru-inc ditto forensic fieldstationeq-

CPE	Name	Operator	Version
cru-inc:ditto_forensic_fieldstation_firmware	cru-inc ditto forensic fieldstation firmware	le	2013jun30a
cru-inc:ditto_forensic_fieldstation	cru-inc ditto forensic fieldstation	eq	-