CVE-2025-59701
Full vulnerability record from the local CVENow database.
Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted).
Severity
MEDIUM
CVSS score
4.1
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2025-12-02 15:15:55.783000
Last modified
2026-11-04 23:10:00.223000
View original CVE JSON
{
"id": "CVE-2025-59701",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:55.783",
"lastModified": "2026-11-04T23:10:00.223",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker (with elevated privileges) to read and modify the Appliance SSD contents (because they are unencrypted)."
},
{
"lang": "es",
"value": "Entrust nShield Connect XC, nShield 5c, y nShield HSMi hasta la versión 13.6.11, o 13.7, permiten a un atacante físicamente próximo (con privilegios elevados) leer y modificar el contenido del SSD del dispositivo (porque no están cifrados)."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"version": "n/a",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"attackVector": "PHYSICAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 0.7,
"impactScore": 3.4
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-12-02T17:59:07.628779Z",
"id": "CVE-2025-59701",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/advisories/GHSA-9h64-8g5h-r7hm",
"source": "[email protected]"
},
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025",
"source": "[email protected]"
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}