CVE-2025-59695

CriticalCVSS 9.8

Published: 02/12/2025(UTC)Updated: 26/08/2026(UTC)Translated: 26/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

44th percentile - higher than 44% of all known CVEs

Summary

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11 or 13.7 (patched in 13.6.12 LTS and 13.9.0 STS) allow a user with OS root access to alter firmware on the Chassis Management Board without authentication. This is called F04.

Risk Assessment

A user with root privileges could alter firmware, potentially compromising HSM integrity and key security.

Recommendation

Apply available firmware updates (13.6.12 LTS or 13.9.0 STS). Restrict root access to the OS and monitor firmware changes.

Original NVD description (English source)

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04.