Cru-inc

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Cru-inc records in CISA KEV

No Cru-inc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ditto Forensic Fieldstation 4 records MEDIUM Ditto Forensic Fieldstation Firmware 4 records MEDIUM

Records

4 records

TI-2013-05654 CVE-2013-6881 · GHSA-qc64-5rgf-5q2h

CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers…

MEDIUM 57

CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the forensic imaging task…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.12607 Published 2014-01-07 No fix listed CWE-78

TI-2013-05657 CVE-2013-6884 · GHSA-3r65-2rvr-4m87

The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has…

MEDIUM 55

The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which allows remote attackers to gain privileges.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10275 Published 2014-01-07 No fix listed CWE-255

TI-2013-05656 CVE-2013-6883 · GHSA-xgfw-74v4-h83f

Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with…

LOW 35

Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to hijack the authentication of administrators for requests that modify the disk…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02509 Published 2013-12-17 No fix listed CWE-352

TI-2013-05655 CVE-2013-6882 · GHSA-3jf2-c8c6-ph58

Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation…

LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remote attackers to inject arbitrary web script or HTML via the username parameter in…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03478 Published 2013-12-17 No fix listed CWE-79

Open these records in search →

Critical	2
High	0
Medium	2
Low	0
No CVSS	0