GCVE - cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Entrust (`0f27ce43-e26d-5a08-9994-0b131f19e680`)
Product	Nshield Hsmi Firmware (`f9d926e3-3f26-5d40-a5af-d656f8b57ea9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-59705`	vulnerable	2026-06-08 07:35:22.879525	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:29:43.836Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59704`	vulnerable	2026-06-08 07:35:22.878714	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password. Published: 2025-12-02T00:00:00.000Z Updated: 2026-01-06T20:22:41.540Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59703`	vulnerable	2026-06-08 07:35:22.877766	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-03T14:50:00.869Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59702`	vulnerable	2026-06-08 07:35:22.876966	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components. Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:33:28.584Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59701`	vulnerable	2026-06-08 07:35:22.876093	Details available Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted). Published: 2025-12-02T00:00:00.000Z Updated: 2025-12-02T18:14:38.843Z Open on db.gcve.eu Reference links https://www.entrust.com/use-case/why-use-an-hsm https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59700`	vulnerable	2026-06-08 07:35:22.874913	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59699`	vulnerable	2026-06-08 07:35:22.873537	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59698`	vulnerable	2026-06-08 07:35:22.872489	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59697`	vulnerable	2026-06-08 07:35:22.871612	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59696`	vulnerable	2026-06-08 07:35:22.870721	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59695`	vulnerable	2026-06-08 07:35:22.869622	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59694`	vulnerable	2026-06-08 07:35:22.866818	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-59693`	vulnerable	2026-06-08 07:35:22.859517	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.