Description
Secure Elements Class 5 AVR client (aka C5 EVM) before 2.8.1 generates predictable CEIDs, which allows remote attackers to determine the CEID of a protected asset, which can be used in other attacks against AVR.
References
- 20378 third-party-advisory
- c5emv-ceid-weak-security(26767) vdb-entry
- VU#353945 third-party-advisory
- ADV-2006-2069 vdb-entry
- 1016184 vdb-entry
- http://www.kb.cert.org/vuls/id/MIMG-6JLSP7