CVE-2006-2707

CVE-2006-2707

EPSS 1.1%

Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtaining an update, which could allow remote attackers to distribute malicious updates to clients.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/20378 http://securitytracker.com/id?1016184 https://exchange.xforce.ibmcloud.com/vulnerabilities/26758 http://www.kb.cert.org/vuls/id/207337 http://www.kb.cert.org/vuls/id/WDON-6QAPAL http://www.vupen.com/english/advisories/2006/2069