Priority HIGH 65
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface th…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00352 · Published 2025-12-02 · No fix listed CWE-269
Priority HIGH 75
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00284 · Published 2025-12-02 · No fix listed CWE-287
Priority HIGH 80
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to access the internal components of the appliance, wit…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00499 · Published 2025-12-02 · No fix listed CWE-284
Priority HIGH 67
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker with elevated privileges to falsify tamper events by ac…
CVSS 3.1HIGH 7.2· Physical · High privileges · No interaction · EPSS 0.00332 · Published 2025-12-02 · No fix listed CWE-203
Priority LOW 19
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker (with elevated privileges) to read and modify the Appli…
CVSS 3.1MEDIUM 4.1· Physical · Low privileges · No interaction · EPSS 0.00208 · Published 2025-12-02 · No fix listed CWE-312
Priority HIGH 67
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker with root access to modify the Recovery Partition (beca…
CVSS 3.1MEDIUM 5.8· Local · High privileges · User interaction · EPSS 0.002 · Published 2025-12-02 · No fix listed CWE-345
Priority LOW 32
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to escalate privileges by booting from a USB device wit…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00356 · Published 2025-12-02 · No fix listed CWE-290
Priority HIGH 65
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physically proximate attacker to gain access to the EOL legacy bootloader.
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00356 · Published 2025-12-02 · No fix listed CWE-1270
Priority HIGH 67
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootl…
CVSS 3.1HIGH 7.2· Physical · High privileges · No interaction · EPSS 0.00332 · Published 2025-12-02 · No fix listed CWE-269
Priority MEDIUM 49
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to modify or erase tamper events via the Chassis manage…
CVSS 3.1LOW 3.2· Physical · Low privileges · No interaction · EPSS 0.00259 · Published 2025-12-02 · No fix listed CWE-1263
Priority MEDIUM 50
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user with OS root access to alter firmware on the Chassis Management Board (without A…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00719 · Published 2025-12-02 · No fix listed CWE-306
Priority HIGH 65
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to persistently modify…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00343 · Published 2025-12-02 · No fix listed CWE-1274
Priority HIGH 82
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to obtain debug access…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00972 · Published 2025-12-02 · No fix listed CWE-269