Vulnerability Details CVE-2025-59694
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to persistently modify firmware and influence the (insecurely configured) appliance boot process. To exploit this, the attacker must modify the firmware via JTAG or perform an upgrade to the chassis management board firmware. This is called F03.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 5.6%
CVSS Severity
CVSS v3 Score 6.8
References
Products affected by CVE-2025-59694
-
cpe:2.3:h:entrust:nshield_5c:-
-
cpe:2.3:h:entrust:nshield_connect_xc_base:-
-
cpe:2.3:h:entrust:nshield_connect_xc_high:-
-
cpe:2.3:h:entrust:nshield_connect_xc_mid:-
-
cpe:2.3:h:entrust:nshield_hsmi:-
-
cpe:2.3:o:entrust:nshield_5c_firmware:*
-
cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*
-
cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*
-
cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*
-
cpe:2.3:o:entrust:nshield_hsmi_firmware:*