CVE-2025-59695

The Entrust nShield Connect XC , nShield 5c , and nShield HSMi products (through version 13.6.11 or 13.7 ) are vulnerable to a flaw where a user with OS root access can alter the Chassis Management Board firmware without authentication (categorized as F04 ). The vulnerability is addressed in vers...

CVE-2025-59697

Entrust nShield Connect XC , nShield 5c , and nShield HSMi are vulnerable to a privilege escalation flaw (identified as F06 ). A physically proximate attacker can escalate privileges by editing the Legacy GRUB bootloader configuration to initiate a root shell during the host OS boot process. This...

CVE-2025-59702

The hardware security modules Entrust nShield Connect XC , nShield 5c , and nShield HSMi are vulnerable in versions through 13.6.11 and version 13.7 . A physically proximate attacker with elevated privileges can access internal components to falsify tamper events . Remediation involves updating t...

CVE-2025-59705

Entrust nShield Connect XC , nShield 5c , and nShield HSMi (versions through 13.6.11 or 13.7 ) are vulnerable to an Unauthorized Reactivation of the USB interface (F01). A physically proximate attacker can escalate privileges by inserting a chassis probe during system boot to enable the USB inter...

CVE-2025-59699

Entrust nShield Connect XC , nShield 5c , and nShield HSMi running software through version 13.6.11 or 13.7 are vulnerable to a privilege escalation attack. A physically proximate attacker can escalate privileges by booting from a USB device containing a valid root filesystem. This vulnerability ...

CVE-2025-59703

Entrust nShield Connect XC , nShield 5c , and nShield HSMi (versions through 13.6.11 or 13.7 ) are vulnerable to an F14 attack . This physical security flaw allows a Physically Proximate Attacker to access the internal components of the appliance without leaving any tamper evidence. To exploit th...

CVE-2025-59704

The Entrust nShield Connect XC , nShield 5c , and nShield HSMi hardware, running versions through 13.6.11 or 13.7 , are vulnerable to an issue where an attacker can gain access to the BIOS menu because it lacks a password. This vulnerability allows for unauthorized configuration changes at the fi...

CVE-2025-59701

The Entrust nShield Connect XC , nShield 5c , and nShield HSMi products (versions through 13.6.11 or 13.7 ) are vulnerable to a flaw that allows a physically proximate attacker with elevated privileges to read and modify the Appliance SSD contents . The root cause is that these contents are unenc...

CVE-2025-59694

The Chassis Management Board in Entrust nShield Connect XC , nShield 5c , and nShield HSMi is vulnerable through versions 13.6.11 or 13.7 . A physically proximate attacker can persistently modify the firmware and influence the (insecurely configured) appliance boot process. Exploitation requires ...

CVE-2025-59696

The Entrust nShield Connect XC , nShield 5c , and nShield HSMi hardware security modules, running firmware versions through 13.6.11 or 13.7 , are vulnerable to a physical security flaw. A physically proximate attacker can modify or erase tamper events by accessing the Chassis management board . T...

CVE-2025-59693

The Chassis Management Board in Entrust nShield Connect XC , nShield 5c , and nShield HSMi (through versions 13.6.11 or 13.7) is vulnerable to an F02 attack. A physically proximate attacker can bypass the tamper label and open the chassis without leaving evidence to access the JTAG connector . Th...

CVE-2025-59700

The Entrust nShield Connect XC , nShield 5c , and nShield HSMi hardware security modules, running firmware versions through 13.6.11 or 13.7 , are vulnerable to unauthorized modification of the Recovery Partition . This issue stems from a lack of integrity protection , allowing a physically proxim...

CVE-2025-59698

Entrust nShield Connect XC , nShield 5c , and nShield HSMi devices may allow a physically proximate attacker to gain access to the EOL legacy bootloader . Affected versions include those through 13.6.11 or 13.7 . Remediation involves updating the software to versions later than 13.6.11 or 13.7; s...