CVE-2025-59693

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing th...

CVE-2025-59704: Improper Authentication

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow an attacker to gain access the the BIOS menu because is has no password...

CVE-2025-59703: Improper Access Control

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the...

CVE-2025-59705: Improper Privilege Management

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of...

CVE-2025-59702: Observable Discrepancy

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components...

CVE-2025-59701: Cleartext Storage of Sensitive Information

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

CVE-2025-59700: Insufficient Verification of Data Authenticity

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker with root access to modify the Recovery Partition because of a lack of integrity protection...

CVE-2025-59699: Authentication Bypass by Spoofing

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the...

CVE-2025-59698: Generation of Incorrect Security Tokens

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, might allow a physically proximate attacker to gain access to the EOL legacy bootloader...

CVE-2025-59696: Improper Physical Access Control

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker to modify or erase tamper events via the Chassis management board...

CVE-2025-59695: Missing Authentication for Critical Function

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a user with OS root access to alter firmware on the Chassis Management Board without Authentication. This is called F04...

CVE-2025-59693: Improper Privilege Management

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis...

CVE-2025-59694: Improper Access Control for Volatile Memory Containing Boot Code

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allows a physically proximate attacker to persistently modify firmware and influence the insecurely configured appliance boot process. To exploi...

Entrust nShield Connect XC security vulnerabilities

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker with elevated privileges who can forge tamper events...

CVE-2025-59698

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, might allow a physically proximate attacker to gain access to the EOL legacy bootloader...

CVE-2025-59701

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents because they are unencrypted...

CVE-2025-59702

The hardware security modules Entrust nShield Connect XC , nShield 5c , and nShield HSMi are vulnerable in versions through 13.6.11 and version 13.7 . A physically proximate attacker with elevated privileges can access internal components to falsify tamper events . Remediation involves updating t...

CVE-2025-59701

The Entrust nShield Connect XC , nShield 5c , and nShield HSMi products (versions through 13.6.11 or 13.7 ) are vulnerable to a flaw that allows a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents . The root cause is that these contents are unenc...

PT-2025-48706

Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version...

PT-2025-48707

Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version...