C5 Enterprise Vulnerability Management

c5_enterprise_vulnerability_management

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2006-2717 1Secure Elements 1C5 Enterprise Vulnerability Management Apr 16, 2026 May 31, 2006 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via mod...Show more Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via modified pathnames, possibly due to a directory traversal issue.Show less
CVE-2006-2716 1Secure Elements 1C5 Enterprise Vulnerability Management Apr 16, 2026 May 31, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server.
CVE-2006-2715 1Secure Elements 1C5 Enterprise Vulnerability Management Apr 16, 2026 May 31, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.
CVE-2006-2714 1Secure Elements 1C5 Enterprise Vulnerability Management Apr 16, 2026 May 31, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID.
CVE-2006-2713 1Secure Elements 1C5 Enterprise Vulnerability Management Apr 16, 2026 May 31, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR.
CVE-2006-2705 1Secure Elements 1C5 Enterprise Vulnerability Management Apr 16, 2026 May 31, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified denial of service via a large number of forged client registration messages.
CVE-2006-2704 1Secure Elements 1C5 Enterprise Vulnerability Management Apr 16, 2026 May 31, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in cleartext, which allows remote attackers to read sensitive vulnerability information.