CVE-2025-59704

PoC —

CVSS 3.1

4.6 medium

EPSS

<1%p18

Published

Dec 2, 2025 (Dec 2, 2025)

Modified

Aug 26, 2026

Description

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

Vendors: entrust
Products: nshield 5c firmware, nshield hsmi firmware, nshield connect xc base firmware, nshield connect xc mid firmware, nshield connect xc high firmware
Weakness: CWE-287
Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.