Vulnerabilities > CVE-2006-2714 - Remote Security vulnerability in C5 Enterprise Vulnerability Management

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
secure-elements

Summary

Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID.

Vulnerable Configurations

Part Description Count
Application
Secure_Elements
1