CVE-2010-2307

EPSS 8.6%

Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/12865unverified exploitdbwww.exploit-db.com/exploits/12865unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/40054 https://exchange.xforce.ibmcloud.com/vulnerabilities/59113 http://www.exploit-db.com/exploits/12865 http://www.osvdb.org/65249 http://www.securityfocus.com/bid/40550