← Database

CVE-2010-2307

MEDIUM CVSS: 5.0 Published: 2010-06-16 Modified: 2026-06-16

Description

Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.

Affected Platforms

Motorola Surfboard Sbv6120E

Weakness Type

CWE-22

References