PT-2006-3635 · Secure Elements · Secure Elements Class 5 Avr

Published 2006-05-31 · Updated 2017-07-20 · CVE-2006-2715

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Secure Elements Class 5 AVR (aka C5 EVM) versions prior to 2.8.1

Description The issue is related to the Administration Console, which does not enforce access control. This allows remote attackers to gain access to servers via the console.

Recommendations For versions prior to 2.8.1, update to version 2.8.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-2715

Affected Products

Secure Elements Class 5 Avr

References · 7

• http://kb.cert.org/vuls/id/397417 · Patch
• http://secunia.com/advisories/20378 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2715 · Security Note
• http://vupen.com/english/advisories/2006/2069 · Note
• http://securitytracker.com/id?1016184 · Note
• http://kb.cert.org/vuls/id/WDON-6QANYE · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26760 · Note