Vulnerability in Secure Elements Class 5 Enterprise Vulnerability Management
CVE-2006-2707
Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients.
EPSS: 0.011 (63.4th percentile) — read the EPSS interpretation.
Affected products
- Secure_elements Class_5_enterprise_vulnerability_management — versions 2.8.0
- N/a — versions n/a
References
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)