Back to Database
Status published
Medium
CVE-2006-2711
Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and...
Vulnerability Description
Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2711
Credits & Attribution
No credits recorded in the NVD database.
References
More from secure elements
View All →CVE-2006-2717
Unspecified vulnerability in Secure Elements Class 5 AVR client and...
Medium
4
CVE-2006-2716
Secure Elements Class 5 AVR server (aka C5 EVM) before...
High
7.5
CVE-2006-2715
The Administration Console in Secure Elements Class 5 AVR (aka...
High
7.5
CVE-2006-2714
Secure Elements Class 5 AVR client (aka C5 EVM) before...
Medium
5
CVE-2006-2713
Secure Elements Class 5 AVR client (aka C5 EVM) before...
Medium
5
Affected Vendor
secure elements
View all reports →Affected Software
class 5 enterprise vulnerability management
Vulnerable Versions:
2.8.0
Timeline
Official Publish:
May 31st, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.