Dashboard / CVE-2025-59705

CVE-2025-59705

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 49/100
Published: 2025-12-02 Modified: 2026-11-04 First seen: 2026-11-04 Status: active

Attack Surface

Low Complexity No Auth No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Physical
AC: Low
PR: None
UI: None
S: Unchanged
C: High
I: High
A: High

Description

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01.

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
entrust nshield_5c_firmware < 13.6.12
entrust nshield_connect_xc_base_firmware < 13.6.12
entrust nshield_connect_xc_high_firmware < 13.6.12
entrust nshield_connect_xc_mid_firmware < 13.6.12
entrust nshield_hsmi_firmware < 13.6.12

References & Advisories (3)

Bug Bounty Relevance

49 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

6.8 / 10.0 v3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.35%
Raw Score 0.003520
Percentile 29.0%
Date 2026-11-04

Intelligence Sources

nvd ref →

External Links