CVEvulnerability

CVE-2006-2707

5.0 MEDIUM Published 2006-05-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients.

Affected configurations

• secure elements class 5 enterprise vulnerability management 2.8.0

References