Description
The Administration Console in Secure Elements Class 5 AVR (aka C5 EVM) before 2.8.1 does not enforce access control, which allows remote attackers to gain access to servers via the console.
References
- c5evm-console-operation-gain-access(26760) vdb-entry
- 20378 third-party-advisory
- ADV-2006-2069 vdb-entry
- 1016184 vdb-entry
- VU#397417 third-party-advisory
- http://www.kb.cert.org/vuls/id/WDON-6QANYE