This page lists publicly disclosed CVE vulnerabilities affecting secure_elements c5_enterprise_vulnerability_management (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2006-2717 | Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via modified pathnames, possibly due to a directory traversal issue. | [email protected] | 4.0 | 1.85% | 2006-05-31 | 2026-04-16 |
| CVE-2006-2716 | Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which allows remote attackers to gain access to the server. | [email protected] | 7.5 | 2.11% | 2006-05-31 | 2026-04-16 |
| CVE-2006-2715 | The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console. | [email protected] | 7.5 | 2.11% | 2006-05-31 | 2026-04-16 |
| CVE-2006-2714 | Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID. | [email protected] | 5.0 | 1.84% | 2006-05-31 | 2026-04-16 |
| CVE-2006-2713 | Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR. | [email protected] | 5.0 | 1.89% | 2006-05-31 | 2026-04-16 |
| CVE-2006-2705 | Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified denial of service via a large number of forged client registration messages. | [email protected] | 5.0 | 2.13% | 2006-05-31 | 2026-04-16 |
| CVE-2006-2704 | Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in cleartext, which allows remote attackers to read sensitive vulnerability information. | [email protected] | 5.0 | 2.08% | 2006-05-31 | 2026-04-16 |