Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem
Published Dec 2, 2025
6.8
MEDIUMCVSS 3.1
EPSS 0.33%
Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader.
Affected products
No data.
Configuration 1
- < 13.6.12
- ≥ 13.7 · < 13.9.0
Running on/with
- n/a
Configuration 2
- < 13.6.12
- ≥ 13.7 · < 13.9.0
Running on/with
- n/a
Configuration 3
- < 13.6.12
- ≥ 13.7 · < 13.9.0
Running on/with
- n/a
Configuration 4
- < 13.6.12
- ≥ 13.7 · < 13.9.0
Running on/with
- n/a
Configuration 5
- < 13.6.12
- ≥ 13.7 · < 13.9.0
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
TotalDecision
n/aAssessed Dec 4, 2025 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
Score over time
2025–2026- EPSS v4
- EPSS v5
Percentile over time
- EPSS v4
- EPSS v5
Table of values (3 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 0.33% (0.00329) | 23.73th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.27% (0.00272) | 18.69th | v5 (v2026.06.15) |
| Dec 3, 2025 | 0.02% (0.00018) | 3.90th | v4 (v2025.03.14) |
References (4)
- https://github.com/advisories/GHSA-g9v7-h8x8-w5vw
- https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj ExploitThird Party Advisory
- https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025
- https://www.entrust.com/use-case/why-use-an-hsm Product
Change history (0)
No recorded changes yet.