CVE-2006-2714: Secure Elements c5 Enterprise Vulnerability Management

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message, which allows remote attackers to send messages to a protected asset without knowing the proper CEID.

Affected products

• Secure Elements c5 Enterprise Vulnerability Management: any version

Published 2006-05-31. Last modified 2026-06-16.