CVE-2006-2710 Weak cryptography in n/a
Remote attackers can decrypt communications because the device uses a shared invariant RSA key across all installations.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-2710?
CVE-2006-2710 is a medium-severity vulnerability in n/a, published on 31 May 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers with the key to decrypt communications.
Which versions are affected by CVE-2006-2710?
It affects 1 product.
Products include Secure Elements Class 5 Enterprise Vulnerability Management.
How do I fix CVE-2006-2710?
No fix has been published for CVE-2006-2710 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-2710 being exploited?
There is no known exploitation of CVE-2006-2710 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-v4m5-x9xp-5653.