CVE-2007-4220

Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote...

7.8 HighPublic exploit

Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary files via a .. (dot dot) in a Send request, probably related to the (1) Send and (2) Exchange services.

Exploit likelihood

3.96%Down 2.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.8

Record: CVE-2007-4220
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:C/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-4220
Updated: 2026-11-02

EUVDEUVD-2007-4203 No score

Record: EUVD-2007-4203
Updated: 2026-11-03

GitHub AdvisoriesGHSA-x6rh-q9j9-6236 No score

Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote...

Record: GHSA-x6rh-q9j9-6236
Weakness: CWE-22
Updated: 2026-11-02

Affected products

motorola timbuktu

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Motorola Timbuktu Pro 8.6.3.1367 - Directory Traversal	2007-08-27

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-4220 is a high vulnerability (CVSS 7.8) in Motorola Timbuktu, published August 29, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.96%, the 90th percentile. No source names a fixed version.