CVE-2013-6882: Multiple cross-site scripting (XSS) vulnerabilities in CRU Ditto Forensic FieldStation with firmware 2013Oc...

Security readout for executives and security teams

This CVE describes stored or reflected cross-site scripting in the CRU Ditto Forensic FieldStation web interface on firmware 2013Oct15a and earlier. An attacker could inject script through the login username field, and authenticated users could inject script through unspecified forms. Business risk depends on whether these legacy forensic devices are still deployed and reachable. Exposure is likely limited to organizations still operating CRU Ditto Forensic FieldStation devices with 2013Oct15a or earlier firmware. Risk increases if the web management interface is reachable by untrusted users or shared networks. Treat this as a legacy exposure cleanup item unless a vulnerable device is internet-facing or used in sensitive forensic workflows. Prioritize isolation, firmware verification, and vendor support status before broader remediation work. Mitigation focus: Inventory CRU Ditto Forensic FieldStation devices and record firmware versions.; Check CRU guidance for fixed firmware or supported replacement options.; Restrict management interface access to trusted administrative networks only..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.