The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to persistently modify firmware and influence the (insecurely configured) appliance boot process. To exploit this, the attacker must modify the firmware via JTAG or perform an upgrade to the chassis management board firmware. This is called F03.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HEntrust Nshield 5c
HWEntrustwszystkie wersjeEntrust Nshield 5c Firmware
OSEntrust< 13.6.1213.7.3 – 13.9.0 (bez)Entrust Nshield Connect Xc Base
HWEntrustwszystkie wersjeEntrust Nshield Connect Xc Base Firmware
OSEntrust13.7.3 – 13.9.0 (bez)< 13.6.12Entrust Nshield Connect Xc High
HWEntrustwszystkie wersjeEntrust Nshield Connect Xc High Firmware
OSEntrust< 13.6.1213.7.3 – 13.9.0 (bez)Entrust Nshield Connect Xc Mid
HWEntrustwszystkie wersjeEntrust Nshield Connect Xc Mid Firmware
OSEntrust13.7.3 – 13.9.0 (bez)< 13.6.12Entrust Nshield Hsmi
HWEntrustwszystkie wersjeEntrust Nshield Hsmi Firmware
OSEntrust< 13.6.1213.7.3 – 13.9.0 (bez)
Related vulnerabilities
Entrust nShield HSM: fizyczny dostęp do wnętrza urządzenia bez śladów ingerencji
Entrust nShield HSM — privilege escalation przez fizyczny dostęp JTAG
Entrust nShield: modyfikacja firmware CMB bez uwierzytelnienia
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximat...
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximat...