Secure Elements Class 5 Enterprise Vulnerability Management — known CVE vulnerabilities

Every CVE whose affected-product data names Secure Elements Class 5 Enterprise Vulnerability Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2006-2706 — CVSS 5.0 (medium): Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause a denial of service via forged "session…
• CVE-2006-2707 — CVSS 5.0 (medium): Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could…
• CVE-2006-2708 — CVSS 5.0 (medium): Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size…
• CVE-2006-2709 — CVSS 5.0 (medium): Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1)…
• CVE-2006-2710 — CVSS 5.0 (medium): Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers…
• CVE-2006-2711 — CVSS 5.0 (medium): Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key…
• CVE-2006-2712 — CVSS 5.0 (medium): Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows…