Dashboard / CVE-2025-59704

CVE-2025-59704

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 44/100
Published: 2025-12-02 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Physical
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: High
A: None

Description

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
entrust nshield_5c_firmware < 13.6.12
entrust nshield_connect_xc_base_firmware < 13.6.12
entrust nshield_connect_xc_high_firmware < 13.6.12
entrust nshield_connect_xc_mid_firmware < 13.6.12
entrust nshield_hsmi_firmware < 13.6.12

References & Advisories (4)

Bug Bounty Relevance

44 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

4.6 / 10.0 v3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS — Exploitation Probability

0.28%
Raw Score 0.002840
Percentile 21.0%
Date 2026-11-04

Intelligence Sources

nvd ref →

External Links