CVEvulnerability

CVE-2025-59704

4.6 MEDIUM Published 2025-12-02 Modified 2026-08-26 Official page ↗
Status
Modified
Published
2025-12-02
Last modified
2026-08-26
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-287

Description

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

Affected configurations

• entrust nshield 5c firmware (< 13.6.12) • entrust nshield 5c firmware (>= 13.7 < 13.9.0) • entrust nshield hsmi firmware (< 13.6.12) • entrust nshield hsmi firmware (>= 13.7 < 13.9.0) • entrust nshield connect xc base firmware (< 13.6.12) • entrust nshield connect xc base firmware (>= 13.7 < 13.9.0) • entrust nshield connect xc mid firmware (< 13.6.12) • entrust nshield connect xc mid firmware (>= 13.7 < 13.9.0) • entrust nshield connect xc high firmware (< 13.6.12) • entrust nshield connect xc high firmware (>= 13.7 < 13.9.0)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References