GCVE - cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Entrust (`0f27ce43-e26d-5a08-9994-0b131f19e680`)
Product	Nshield 5C (`e6a59aa6-5d07-5151-95a5-d8ce4c3cd4ea`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-59705`	not_vulnerable	2026-06-08 07:35:22.879504	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:29:43.836Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59704`	not_vulnerable	2026-06-08 07:35:22.878694	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password. Published: 2025-12-02T00:00:00.000Z Updated: 2026-01-06T20:22:41.540Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59703`	not_vulnerable	2026-06-08 07:35:22.877747	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:50:00.869Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59702`	not_vulnerable	2026-06-08 07:35:22.876944	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:33:28.584Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59701`	not_vulnerable	2026-06-08 07:35:22.876374	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted). Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:14:38.843Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59700`	not_vulnerable	2026-06-08 07:35:22.874796	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59699`	not_vulnerable	2026-06-08 07:35:22.873392	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59698`	not_vulnerable	2026-06-08 07:35:22.872469	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59697`	not_vulnerable	2026-06-08 07:35:22.871479	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59696`	not_vulnerable	2026-06-08 07:35:22.870701	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59695`	not_vulnerable	2026-06-08 07:35:22.869592	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59694`	not_vulnerable	2026-06-08 07:35:22.866734	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59693`	not_vulnerable	2026-06-08 07:35:22.858790	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.