Vulnerabilidades do Entrust Nshield Connect Xc Base Firmware

CVE-2025-59704 Média · 4.6 CWE-287 02/12/2025

Improper Authentication em Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

CVE-2025-59703 Crítica · 9.1 CWE-284 02/12/2025

Improper Access Control em Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack.

CVE-2025-59705 Média · 6.8 CWE-269 02/12/2025

Improper Privilege Management em Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01.

CVE-2025-59702 Alta · 7.2 CWE-203 02/12/2025

Observable Discrepancy em Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components.

CVE-2025-59701 Média · 4.1 CWE-312 02/12/2025

Cleartext Storage of Sensitive Information em Entrust Nshield Connect Xc High Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted).

CVE-2025-59700 Baixa · 3.9 CWE-345 02/12/2025

Insufficient Verification of Data Authenticity em Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).

CVE-2025-59699 Média · 6.8 CWE-290 02/12/2025

Authentication Bypass by Spoofing em Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader.

CVE-2025-59698 Média · 6.8 CWE-1270 02/12/2025

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7…

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physically proximate attacker to gain access to the EOL legacy bootloader.

CVE-2025-59697 Alta · 7.2 CWE-269 02/12/2025

Improper Privilege Management em Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootloader configuration to start a root shell upon boot of the host OS. This is called F06.

CVE-2025-59696 Baixa · 3.2 CWE-1263 02/12/2025

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7…

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to modify or erase tamper events via the Chassis management board.

CVE-2025-59695 Crítica · 9.8 CWE-306 02/12/2025

Missing Authentication for Critical Function em Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04.

CVE-2025-59694 Média · 6.8 CWE-1274 02/12/2025

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi…

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to persistently modify firmware and influence the (insecurely configured) appliance boot process. To exploit this, the attacker must modify the firmware via JTAG or perform an upgrade to the chassis management board firmware. This is called F03.

CVE-2025-59693 Crítica · 9.8 CWE-269 02/12/2025

Improper Privilege Management em Entrust Nshield 5c Firmware

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02.