GCVE - cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Entrust (`0f27ce43-e26d-5a08-9994-0b131f19e680`)
Product	Nshield Connect Xc High (`1308d429-faec-5820-9799-bb7e9efb58ee`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-59705`	not_vulnerable	2026-06-08 07:35:22.879808	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:29:43.836Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59704`	not_vulnerable	2026-06-08 07:35:22.879148	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password. Published: 2025-12-02T00:00:00.000Z Updated: 2026-01-06T20:22:41.540Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59703`	not_vulnerable	2026-06-08 07:35:22.878315	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:50:00.869Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59702`	not_vulnerable	2026-06-08 07:35:22.877336	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:33:28.584Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59701`	not_vulnerable	2026-06-08 07:35:22.875862	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted). Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:14:38.843Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59700`	not_vulnerable	2026-06-08 07:35:22.875416	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59699`	not_vulnerable	2026-06-08 07:35:22.874026	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59698`	not_vulnerable	2026-06-08 07:35:22.872994	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59697`	not_vulnerable	2026-06-08 07:35:22.872058	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59696`	not_vulnerable	2026-06-08 07:35:22.870984	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59695`	not_vulnerable	2026-06-08 07:35:22.870253	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59694`	not_vulnerable	2026-06-08 07:35:22.867259	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59693`	not_vulnerable	2026-06-08 07:35:22.866081	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.