CVE-2010-2307: Motorola Surfboard SBV6120E

Medium severity, CVSS 5.0. EPSS: 8.6% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.

Affected products

• Motorola Surfboard SBV6120E: version sbv6x2x-1.0.0.5-scm-02-shpc only

Published 2010-06-16. Last modified 2026-06-16.