CVE-2025-59697: Improper Privilege Management

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 patched in 13.6.12 LTS and 13.9.0 STS, allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootloader configuration to start a root shell upon boot of the host OS. This is called...

Entrust nShield Connect XC 安全漏洞

Entrust nShield Connect XC is a network-connected hardware security module from Entrust USA. A security vulnerability exists in Entrust nShield Connect XC that originates from a physical neighbor attacker who can persistently modify the firmware and affect the device boot process...

CVE-2025-59697

Entrust nShield Connect XC , nShield 5c , and nShield HSMi are vulnerable to a privilege escalation flaw (identified as F06 ). A physically proximate attacker can escalate privileges by editing the Legacy GRUB bootloader configuration to initiate a root shell during the host OS boot process. This...

EUVD-2015-1984

Malware in sbrugna...

Multiple Thales nShield Connect Hardware Privilege Access Control Vulnerabilities

Thales nShield Connect hardware models 500 and others are networked HSM Hardware Security Module devices from Thales e-Security, USA. A security vulnerability exists in several models of Thales nShield Connect hardware. An attacker in close physical proximity could exploit this vulnerability to...

Code injection

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key KNETI and impersonate the nShield Connect device on a network, affect...

CVE-2015-1878

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key KNETI and impersonate the nShield Connect device on a network, affect...

CVE-2015-1878

The CVE-2015-1878 case affects Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ prior to version 11.72. The issue arises when a physically proximate attacker connects via the front-panel USB port to sign arbitrary data with previously loaded signing keys, extract the...

CVE-2015-1878

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key KNETI and impersonate the nShield Connect device on a network, affect...

PT-2017-6535

Name of the Vulnerable Software and Affected Versions Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ versions prior to 11.72 Description The issue allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device...

CVE-2015-1878: Undefined Security Weakness

Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate attackers to sign arbitrary data with previously loaded signing keys, extract the device identification key KNETI and impersonate the nShield Connect device on a network, affect...

Information disclosure

nCipher firmware before V10, as used by 1 nShield, 2 nForce, 3 netHSM, 4 payShield, 5 SecureDB, 6 DSE200 Document Sealing Engine, 7 Time Source Master Clock TSMC, and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote...

CVE-2006-1117: Undefined Security Weakness

nCipher firmware before V10, as used by 1 nShield, 2 nForce, 3 netHSM, 4 payShield, 5 SecureDB, 6 DSE200 Document Sealing Engine, 7 Time Source Master Clock TSMC, and possibly other products, contains certain options that were only intended for testing and not production, which might allow remote...