GCVE - cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Entrust (`0f27ce43-e26d-5a08-9994-0b131f19e680`)
Product	Nshield Hsmi (`97e11b95-179b-5ca7-a3a7-48bfeba2133b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-59705`	not_vulnerable	2026-06-08 07:35:22.879546	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:29:43.836Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59704`	not_vulnerable	2026-06-08 07:35:22.878735	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password. Published: 2025-12-02T00:00:00.000Z Updated: 2026-01-06T20:22:41.540Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59703`	not_vulnerable	2026-06-08 07:35:22.877904	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:50:00.869Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59702`	not_vulnerable	2026-06-08 07:35:22.876985	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:33:28.584Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59701`	not_vulnerable	2026-06-08 07:35:22.876228	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted). Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:14:38.843Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59700`	not_vulnerable	2026-06-08 07:35:22.874935	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59699`	not_vulnerable	2026-06-08 07:35:22.873561	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59698`	not_vulnerable	2026-06-08 07:35:22.872606	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59697`	not_vulnerable	2026-06-08 07:35:22.871643	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59696`	not_vulnerable	2026-06-08 07:35:22.870742	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59695`	not_vulnerable	2026-06-08 07:35:22.869649	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59694`	not_vulnerable	2026-06-08 07:35:22.866962	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59693`	not_vulnerable	2026-06-08 07:35:22.860127	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.