CVE-2025-59695
Full vulnerability record from the local CVENow database.
Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2025-12-02 15:15:55.010000
Last modified
2026-11-04 23:10:00.223000
View original CVE JSON
{
"id": "CVE-2025-59695",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.010",
"lastModified": "2026-11-04T23:10:00.223",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04."
},
{
"lang": "es",
"value": "Entrust nShield Connect XC, nShield 5c, y nShield HSMi hasta la versión 13.6.11, o 13.7, permiten a un usuario con acceso root al sistema operativo alterar el firmware en la Placa de Gestión del Chasis (sin autenticación). Esto se denomina F04."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"version": "n/a",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-12-04T17:53:39.533206Z",
"id": "CVE-2025-59695",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-306"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "A225C602-A46C-43A1-B6ED-D85CE086FB13"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "8CA1F545-ADAE-41BF-946A-CEAD5A751BB7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "65C6EC9C-C33D-4C37-ACD3-4B78D6291000"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "125D948A-49AA-4385-8519-081F0787417E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "7779DADF-6D63-4326-981F-BA10860BBDD9"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/advisories/GHSA-w5fv-rcj5-pmj9",
"source": "[email protected]"
},
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025",
"source": "[email protected]"
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}