Lucene search

MitreCVE-2006-2711

HistoryMay 31, 2006 - 10:02 p.m.

CVE-2006-2711

2006-05-3122:02:00

mitre

web.nvd.nist.gov

cve-2006-2711

secure elements class 5 avr

c5 evm

initialization vector

key reuse

message session vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.025

Percentile

90.3%

JSON

Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same initialization vector and key for each message session, which allows remote attackers to obtain potentially sensitive information about messages.

Affected configurations

Nvd

Node

secure_elementsclass_5_enterprise_vulnerability_managementMatch2.8.0

VendorProductVersionCPE
secure_elementsclass_5_enterprise_vulnerability_management2.8.0cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
secure_elements	class_5_enterprise_vulnerability_management	2.8.0	cpe:2.3:a:secure_elements:class_5_enterprise_vulnerability_management:2.8.0:::::::*

References

secunia.com/advisories/20377

securitytracker.com/id?1016184

www.kb.cert.org/vuls/id/346377

www.kb.cert.org/vuls/id/WDON-6QAQN6

www.vupen.com/english/advisories/2006/2068

exchange.xforce.ibmcloud.com/vulnerabilities/26740

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.025

Percentile

90.3%

JSON

Related for CVE-2006-2711