← Vulnerability feed

Vulnerability record · CVE-2025-59704 · published 2 December 2025

CVE-2025-59704: Entrust nshield 5c firmware improper authentication vulnerability

Entrust · Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

4.6 CVSS 3.1 Medium EPSS 0.26% · top 83.6% CWE-287 · Improper authentication
4.6CVSS 3.1 base score
0.26%EPSS exploitation probability, 30 days
NoNot in CISA KEV
5Affected product versions listed by NVD
4References, 1 tagged exploit
26 Aug 2026Last modified by NVD

Description

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected products

5 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/advisories/GHSA-3c73-5g33-8g22
https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj ExploitThird Party Advisory
https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025
https://www.entrust.com/use-case/why-use-an-hsm Product

Track CVE-2025-59704 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-59695Entrust nshield 5c firmware missing authentication for critical function vulnerabilityEntrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user with OS r…EPSS 0.67%9.8CVE-2025-59693Entrust nshield 5c firmware improper privilege management vulnerabilityThe Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.…EPSS 0.90%9.1CVE-2025-59703Entrust nshield 5c firmware improper access control vulnerabilityEntrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Pro…EPSS 0.46%7.2CVE-2025-59697Entrust nshield 5c firmware improper privilege management vulnerabilityEntrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically pro…EPSS 0.31%7.2CVE-2025-59702Entrust nshield 5c firmware observable discrepancy vulnerabilityEntrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically pro…EPSS 0.31%6.8CVE-2025-59705Entrust nshield 5c firmware improper privilege management vulnerabilityEntrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Pro…EPSS 0.33%6.8CVE-2025-59698Entrust nshield 5c firmware vulnerabilityEntrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physical…EPSS 0.33%6.8CVE-2025-59699Entrust nshield 5c firmware authentication bypass by spoofing vulnerabilityEntrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically pro…EPSS 0.33%

Source: NIST National Vulnerability Database (record CVE-2025-59704), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.