NexaPulse
Subscribe
4.6mediumMedium

CVE-2025-59704

Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

Exploitation status

  • Published references include exploit or proof-of-concept material. There is no confirmation it is being used in real attacks.

What the metrics mean

  • It is requires physical access to the device.
  • For an attacker who can reach it, no special conditions are needed to exploit it.
  • To exploit it, no account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
4.6 (v3.1)
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-287
Assigned by
cve@mitre.org

Dates

Published
2025-12-02
Last modified
2026-08-26
Sources
NVD

Affected products

  • Entrust Nshield 5c Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield 5call versions
  • Entrust Nshield Hsmi Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield Hsmiall versions
  • Entrust Nshield Connect Xc Base Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield Connect Xc Baseall versions
  • Entrust Nshield Connect Xc Mid Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield Connect Xc Midall versions
  • Entrust Nshield Connect Xc High Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield Connect Xc Highall versions

As listed in the NVD configuration data. Not a statement about your estate.

References