CVE-2010-2307
NUCLEIMotorola SURFBoard SBV6120E - Directory Traversal via URL Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-2307. PoCs published by S2 Crew. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in Motorola SURFBoard Cable Modem (SBV6120E) allowing unauthorized access to sensitive files like /etc/passwd via crafted URLs.
Description
Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.
Exploits (1)
This exploit demonstrates a directory traversal vulnerability in Motorola SURFBoard Cable Modem (SBV6120E) allowing unauthorized access to sensitive files like /etc/passwd via crafted URLs.