VULNERABILITY INTELLIGENCE

CVE-2006-2709

CVSS score5 MEDIUM
EPSS probability3.68%
CISA KEVNot currently listed
Published2006-05-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which allows remote attackers to (1) execute arbitrary code on a client or (2) forge messages to the server.

Primary references