CVE-2025-59704

medium

Description

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

References

https://www.entrust.com/use-case/why-use-an-hsm

https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025

https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj

https://github.com/advisories/GHSA-3c73-5g33-8g22

Details

Source: Mitre, NVD

Published: 2025-12-02

Updated: 2026-08-26

Risk Information

CVSS v2

Base Score: 4.9

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:C/A:N

Severity: Medium

CVSS v3

Base Score: 4.6

Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N