medium5.0Public exploit code
CVE-2010-2307
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow r…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Motorola Surfboard Cable Modem - Directory Traversal2010-06-03 · remote · hardware
Impact
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Motorola | Surfboard Sbv6120e | Version sbv6x2x-1.0.0.5-scm-02-shpc |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/40054
- http://www.exploit-db.com/exploits/12865
- http://www.osvdb.org/65249
- http://www.securityfocus.com/bid/40550
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59113
- http://secunia.com/advisories/40054
- http://www.exploit-db.com/exploits/12865
- http://www.osvdb.org/65249
- http://www.securityfocus.com/bid/40550
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59113