CVE-2006-2715

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-05-31 · updated 2026-06-16

Description

The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.

Affected products

Secure Elements C5 Enterprise Vulnerability Management: all versions

References

http://secunia.com/advisories/20378
http://securitytracker.com/id?1016184
http://www.kb.cert.org/vuls/id/397417
http://www.kb.cert.org/vuls/id/WDON-6QANYE
http://www.vupen.com/english/advisories/2006/2069
https://exchange.xforce.ibmcloud.com/vulnerabilities/26760
http://secunia.com/advisories/20378
http://securitytracker.com/id?1016184
http://www.kb.cert.org/vuls/id/397417
http://www.kb.cert.org/vuls/id/WDON-6QANYE
http://www.vupen.com/english/advisories/2006/2069
https://exchange.xforce.ibmcloud.com/vulnerabilities/26760

Get alerted when CVE-2006-2715 or the next vulnerability affects your stack