Entrust nShield F03 Firmware Vulnerability

The Entrust nShield Connect XC, nShield 5c, and nShield HSMi are hardware security modules used to protect sensitive data. The Chassis Management Board in these devices allows a physically proximate attacker to persistently modify firmware and influence the appliance boot process, posing a significant risk to the secure storage of sensitive information.

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7.
Check with: jtag -l (requires physical access to the device)

Note: This vulnerability is specific to Entrust's hardware security modules and not related to software applications.

1. Contact Entrust directly for a patched version of the firmware.
2. Immediate mitigations:
3. Restrict network access to your nShield instance (firewall it from the public internet)
4. Audit admin account activity for suspicious access patterns
5. Monitor for unauthorized firmware modifications

• github.com
• www.entrust.com
• github.com