CVE-2013-6881 in Ditto Forensic Fieldstation

Riassunto

di MITRE

CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the forensic imaging task.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 27/11/2013
• Divulgazione: 07/01/2014
• Moderazione: accettato
• Voce: VDB-65994
• CPE: pronto
• CWE: CWE-78 (confermato)
• Sfruttamento: Scaricare
• CVSS: 10.0 (NVD)
• EPSS: 0.12607
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-6881
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-6881
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-6881/