CVE-2006-2707: Secure Elements Class 5 Enterprise Vulnerability Management

Medium severity, CVSS 5.0. EPSS: 1.1% chance of exploitation in the next 30 days.

Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients.

Affected products

• Secure Elements Class 5 Enterprise Vulnerability Management: version 2.8.0 only

Published 2006-05-31. Last modified 2026-06-16.