CVE-2006-2711: Secure Elements Class 5 Enterprise Vulnerability Management

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages.

Affected products

  • Secure Elements Class 5 Enterprise Vulnerability Management: version 2.8.0 only

Published 2006-05-31. Last modified 2026-06-16.