PatchTheCVEsecure elements vulnerabilities
Recent CVEs affecting secure elements products. 14 tracked.
secure elements has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-05-31. Highest priority: CVE-2006-2716 (score 47/100).
- CVE-2006-2717 MEDIUM 4.0 MITIGATE Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows au
- CVE-2006-2716 HIGH 7.5 MITIGATE Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which all
- CVE-2006-2715 HIGH 7.5 MITIGATE The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access co
- CVE-2006-2714 MEDIUM 5.0 MITIGATE Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 does not validate the CEID of an incoming message
- CVE-2006-2713 MEDIUM 5.0 MITIGATE Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote
- CVE-2006-2712 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a messa
- CVE-2006-2711 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR (aka C5 EVM) 2.8.1 and earlier, and possibly later 2.8.x releases, uses the same i
- CVE-2006-2710 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, w
- CVE-2006-2709 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 do not validate the source address of a message, which a
- CVE-2006-2708 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 allows remote attackers to read portions of proce
- CVE-2006-2707 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 does not validate the peer certificate when obtai
- CVE-2006-2706 MEDIUM 5.0 UPGRADE Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause a denial of serv
- CVE-2006-2705 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 allows remote attackers to cause an unspecified d
- CVE-2006-2704 MEDIUM 5.0 DOWNGRADE Secure Elements Class 5 AVR server and client (aka C5 EVM) before 2.8.1 send messages in cleartext, which allo
FAQ
How do I fix secure elements vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is secure elements being exploited right now?
None of the tracked secure elements CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which secure elements CVE should I patch first?
CVE-2006-2716 currently ranks highest (47/100): Secure Elements Class 5 AVR server (aka C5 EVM) before 2.8.1 uses a hard-coded user ID and password, which all.