CVE-2025-59704
4.6
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 0.9 / Impact: 3.6
Source: NVD
Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password.
Affected (10)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Before 13.6.12 |
| Running on/with | Platform Versions |
|---|---|
Entrust Nshield 5c | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Before 13.6.12 |
| Running on/with | Platform Versions |
|---|---|
Entrust Nshield Hsmi | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Before 13.6.12 |
| Running on/with | Platform Versions |
|---|---|
Entrust Nshield Connect Xc Base | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Before 13.6.12 |
| Running on/with | Platform Versions |
|---|---|
Entrust Nshield Connect Xc Mid | All versions |
Configuration E
| Vulnerable Software | Affected Versions |
|---|---|
| Before 13.6.12 |
| Running on/with | Platform Versions |
|---|---|
Entrust Nshield Connect Xc High | All versions |
References (2)
Source: cve@mitre.org
ExploitThird Party Advisory
Timeline
No history available yet.