GCVE - cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Entrust (`0f27ce43-e26d-5a08-9994-0b131f19e680`)
Product	Nshield Connect Xc Mid (`17e79e32-21fd-57fb-94d4-d4dcd546b11c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-59705`	not_vulnerable	2026-06-08 07:35:22.879770	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:29:43.836Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59704`	not_vulnerable	2026-06-08 07:35:22.879025	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password. Published: 2025-12-02T00:00:00.000Z Updated: 2026-01-06T20:22:41.540Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59703`	not_vulnerable	2026-06-08 07:35:22.878172	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:50:00.869Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59702`	not_vulnerable	2026-06-08 07:35:22.877301	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:33:28.584Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59701`	not_vulnerable	2026-06-08 07:35:22.875902	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted). Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:14:38.843Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59700`	not_vulnerable	2026-06-08 07:35:22.875146	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59699`	not_vulnerable	2026-06-08 07:35:22.873813	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59698`	not_vulnerable	2026-06-08 07:35:22.872824	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59697`	not_vulnerable	2026-06-08 07:35:22.871921	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59696`	not_vulnerable	2026-06-08 07:35:22.870947	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59695`	not_vulnerable	2026-06-08 07:35:22.870094	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59694`	not_vulnerable	2026-06-08 07:35:22.867220	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59693`	not_vulnerable	2026-06-08 07:35:22.864525	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.