Class 5 Enterprise Vulnerability Management
Approved changes feed: RSS · Atom
cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*
part: a version: 2.8.0 update: *
| Vendor | Secure Elements (70b5cda5-a1e9-59b7-853b-d9e8bda9b931) |
|---|---|
| Product | Class 5 Enterprise Vulnerability Management (b3aea08e-512f-5abd-b740-f3641daa17fb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2006-2712 |
vulnerable | 2026-06-08 04:49:07.393777 |
Details available
Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows remote attackers to modify and replay messages.
Published: 2006-05-31T22:00:00.000Z
Updated: 2024-08-07T17:58:52.048Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2711 |
vulnerable | 2026-06-08 04:49:07.393475 |
Details available
Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages.
Published: 2006-05-31T22:00:00.000Z
Updated: 2024-08-07T17:58:51.859Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2710 |
vulnerable | 2026-06-08 04:49:07.393202 |
Details available
Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers with the key to decrypt communications.
Published: 2006-05-31T22:00:00.000Z
Updated: 2024-08-07T17:58:51.924Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2709 |
vulnerable | 2026-06-08 04:49:07.392912 |
Details available
Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) execute arbitrary code on a client or (2) forge messages to the server.
Published: 2006-05-31T22:00:00.000Z
Updated: 2024-08-07T17:58:51.923Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2708 |
vulnerable | 2026-06-08 04:49:07.392595 |
Details available
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of process memory via a modified size for (1) EM_GET_CE_PARAMETER and (2) EM_SET_CE_PARAMETER messages, which leads to a buffer overflow (probably an over-read).
Published: 2006-05-31T22:00:00.000Z
Updated: 2024-08-07T17:58:51.881Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2707 |
vulnerable | 2026-06-08 04:49:07.392199 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.