CVE-2006-2707

Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2006-05-31

Last modified

2024-08-07

Affected products

• Class 5 Enterprise Vulnerability Management (Secure Elements)

References

• http://secunia.com/advisories/20378
• http://securitytracker.com/id?1016184
• http://www.kb.cert.org/vuls/id/207337
• http://www.kb.cert.org/vuls/id/WDON-6QAPAL
• http://www.vupen.com/english/advisories/2006/2069
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26758