Vulnerabilities > Secure Elements > C5 Enterprise Vulnerability Management > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2006-05-31 | CVE-2006-2717 | Directory Traversal vulnerability in C5 Enterprise Vulnerability Management Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via modified pathnames, possibly due to a directory traversal issue. | 4.0 |
| 2006-05-31 | CVE-2006-2714 | Remote Security vulnerability in C5 Enterprise Vulnerability Management Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID. | 5.0 |
| 2006-05-31 | CVE-2006-2713 | Remote Security vulnerability in C5 Enterprise Vulnerability Management Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR. | 5.0 |
| 2006-05-31 | CVE-2006-2705 | Denial-Of-Service vulnerability in Secure Elements C5 Enterprise vulnerability Management 2.8.0 Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified denial of service via a large number of forged client registration messages. | 5.0 |
| 2006-05-31 | CVE-2006-2704 | Remote Security vulnerability in Secure Elements C5 Enterprise vulnerability Management 2.8.0 Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in cleartext, which allows remote attackers to read sensitive vulnerability information. | 5.0 |