Description
Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 uses the same invariant RSA key for all installations, which allows remote attackers with the key to decrypt communications.
References
- http://www.kb.cert.org/vuls/id/WDON-6QAQK9
- VU#566553 third-party-advisory
- 20378 third-party-advisory
- c5evm-rsa-key-weak-security(26753) vdb-entry
- ADV-2006-2069 vdb-entry
- 1016184 vdb-entry