Directory Traversal Vulnerabilities in Motorola SURFBoard Cable Modem

CVE-2010-2307

Summary

The web server in the Motorola SURFBoard SBV6120E cable modem exposes multiple directory traversal vulnerabilities. Attackers can exploit these weaknesses by crafting URLs that utilize multiple leading slashes ('//') or dot-dot sequences ('../'), allowing them to read arbitrary files on the affected system. This can lead to sensitive information leakage and unauthorized access to files, posing a significant risk if not mitigated.

References