13
CVEs
3
Critical
2
High
0
KEV
13
PoC
5
Unpatched C/H
0.0%
Patch Rate
0.0%
Avg EPSS
Severity Breakdown
CRITICAL
3
HIGH
2
MEDIUM
6
LOW
2
Monthly CVE Trend
Affected Products (5)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2025-59695 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
No patch
|
| CVE-2025-59693 | The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02. | CRITICAL | 9.8 | 0.1% | 69 |
PoC
No patch
|
| CVE-2025-59703 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack. | CRITICAL | 9.1 | 0.0% | 66 |
PoC
No patch
|
| CVE-2025-59697 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by editing the Legacy GRUB bootloader configuration to start a root shell upon boot of the host OS. This is called F06. | HIGH | 7.2 | 0.0% | 56 |
PoC
No patch
|
| CVE-2025-59702 | A privilege escalation vulnerability (CVSS 7.2) that allows a physically proximate attacker with elevated privileges. Risk factors: public PoC available. | HIGH | 7.2 | 0.0% | 56 |
PoC
No patch
|
| CVE-2025-59694 | CVE-2025-59694 is a security vulnerability (CVSS 6.8) that allows a physically proximate attacker. Risk factors: public PoC available. | MEDIUM | 6.8 | 0.0% | 54 |
PoC
No patch
|
| CVE-2025-59698 | CVE-2025-59698 is a security vulnerability (CVSS 6.8) that allows a physically proximate attacker. Risk factors: public PoC available. | MEDIUM | 6.8 | 0.0% | 54 |
PoC
No patch
|
| CVE-2025-59699 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader. | MEDIUM | 6.8 | 0.0% | 54 |
PoC
No patch
|
| CVE-2025-59705 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01. | MEDIUM | 6.8 | 0.0% | 54 |
PoC
No patch
|
| CVE-2025-59704 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password. | MEDIUM | 4.6 | 0.0% | 43 |
PoC
No patch
|
| CVE-2025-59701 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted). | MEDIUM | 4.1 | 0.0% | 41 |
PoC
No patch
|
| CVE-2025-59700 | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection). | LOW | 3.9 | 0.0% | 40 |
PoC
No patch
|
| CVE-2025-59696 | CVE-2025-59696 is a security vulnerability (CVSS 3.2) that allows a physically proximate attacker. Risk factors: public PoC available. | LOW | 3.2 | 0.0% | 36 |
PoC
No patch
|