Vulnerability in Secure Elements C5 Enterprise Vulnerability Management

CVE-2006-2714

Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID.

EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.

Affected products

References