CVE-2006-2715: The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access co

This month

HIGH 7.5MITIGATE

CVE-2006-2715 is a high-severity flaw (CVSS 7.5) affecting c5 enterprise vulnerability management. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.

Why this priority

High severity

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.5 (High)
EPSS exploit chance	2.2% (top 18%)
CISA exploited list	No
Published	2006-05-31
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: secure elements

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2006-05-31 22:02 UTCPublished CVE record published
2026-06-16 22:25 UTCUpdated Record last modified

secure elements c5 enterprise vulnerability management MITIGATE

Affected: all versions

Fixed in: no fixed release known

Safe to downgrade to: no unaffected older release

1. Check installed version

apt-cache policy c5-enterprise-vulnerability-management || rpm -q c5-enterprise-vulnerability-management || c5-enterprise-vulnerability-management --version

No fixed or unaffected release known

Apply the vendor mitigation from the advisory, disable the affected feature, or restrict network access.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2006-2715?

c5 enterprise vulnerability management: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2006-2715 being exploited?

CVE-2006-2715 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2006-2715 affect?

CVE-2006-2715 affects c5 enterprise vulnerability management. Severity is high (CVSS 7.5). The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.

How urgent is CVE-2006-2715?

Priority 47/100. High severity

Related CVEs

CVE-2006-2717 MEDIUM 4.0 MITIGATE Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows au
CVE-2006-2716 HIGH 7.5 MITIGATE Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which all
CVE-2006-2714 MEDIUM 5.0 MITIGATE Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message
CVE-2006-2713 MEDIUM 5.0 MITIGATE Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote
CVE-2006-2705 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified d

References

← Back to latest CVEs