CVE-2006-2707

Published: May 31, 2006Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients.

Affected (1)

Products: Secure Elements: Class 5 Enterprise Vulnerability Management

Secure Elements

1 product

Class 5 Enterprise Vulnerability Management

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Secure Elements Class 5 Enterprise Vulnerability Management	Version 2.8.0

References (12)

http://secunia.com/advisories/20378

Source: cve@mitre.org

http://securitytracker.com/id?1016184

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/207337

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/WDON-6QAPAL

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/2069

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26758

Source: cve@mitre.org

http://secunia.com/advisories/20378