CVE-2006-2709: Secure Elements Class 5 Enterprise Vulnerability Management

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) execute arbitrary code on a client or (2) forge messages to the server.

Affected products

• Secure Elements Class 5 Enterprise Vulnerability Management: version 2.8.0 only

Published 2006-05-31. Last modified 2026-06-16.