Back to Database
Status published
Medium
CVE-2006-2707
Secure Elements Class 5 AVR server (aka C5 EVM) before...
Vulnerability Description
Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2707
Credits & Attribution
No credits recorded in the NVD database.
References
More from secure elements
View All →CVE-2006-2717
Unspecified vulnerability in Secure Elements Class 5 AVR client and...
Medium
4
CVE-2006-2716
Secure Elements Class 5 AVR server (aka C5 EVM) before...
High
7.5
CVE-2006-2715
The Administration Console in Secure Elements Class 5 AVR (aka...
High
7.5
CVE-2006-2714
Secure Elements Class 5 AVR client (aka C5 EVM) before...
Medium
5
CVE-2006-2713
Secure Elements Class 5 AVR client (aka C5 EVM) before...
Medium
5
Affected Vendor
secure elements
View all reports →Affected Software
class 5 enterprise vulnerability management
Vulnerable Versions:
2.8.0
Timeline
Official Publish:
May 31st, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.