CVE-2013-6881

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) sector size or (2) skip count fields for the forensic imaging task.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-78

Affected software

No affected versions have been published.

Timeline

Published
Jan 7, 2014
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-68824.3Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oct15a and earlier allow (1) remoteCVE-2013-68836.8Cross-site request forgery (CSRF) vulnerability in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a allows remote attackers tCVE-2013-688410.0The write-blocker in CRU Ditto Forensic FieldStation with firmware before 2013Oct15a has a default "ditto" username and password, which alloCVE-2013-68854.7The microcode on AMD 16h 00h through 0Fh processors does not properly handle the interaction between locked instructions and write-combined CVE-2013-68867.2RealVNC VNC 5.0.6 on Mac OS X, Linux, and UNIX allows local users to gain privileges via a crafted argument to the (1) vncserver, (2) vncserCVE-2013-68876.4OpenJPEG 1.5.1 allows remote attackers to cause a denial of service via unspecified vectors that trigger NULL pointer dereferences, divisionCVE-2013-68887.5Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.CVE-2013-68894.9GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.CVE-2013-68905.0denyhosts 2.6 uses an incorrect regular expression when analyzing authentication logs, which allows remote attackers to cause a denial of seCVE-2013-68911.2lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOCVE-2013-68923.5WebSVN 2.3.3 allows remote authenticated users to read arbitrary files via a symlink attack in a commit.CVE-2013-69004.3Cross-site scripting (XSS) vulnerability in the system-administration component in Cybozu Garoon before 3.7.0 allows remote attackers to inj
CVE-2013-6881: Critical severity, CVSS 10.0 | Vulnix