Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted).
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Nshield_connect_xc_high_firmware | Entrust | * | 13.6.12 (excluding) |
| Nshield_connect_xc_high_firmware | Entrust | 13.7 (including) | 13.9.0 (excluding) |