Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nshield_5c_firmware | Entrust | * | 13.6.12 (excluding) |
| Nshield_5c_firmware | Entrust | 13.7 (including) | 13.9.0 (excluding) |