CVE-2025-59700
LOWEntrust nShield HSM <13.6.12 Recovery Partition Modification via Integrity Protection Lack
Title source: llmDescription
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).
References (2)
Core 2
Core References
Exploit, Third Party Advisory
https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj
Scores
CVSS v3
3.9
EPSS
0.0015
EPSS Percentile
4.3%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-345
Status
published
Products (5)
entrust/nshield_5c_firmware
< 13.6.12
entrust/nshield_connect_xc_base_firmware
< 13.6.12
entrust/nshield_connect_xc_high_firmware
< 13.6.12
entrust/nshield_connect_xc_mid_firmware
< 13.6.12
entrust/nshield_hsmi_firmware
< 13.6.12
Published
Dec 02, 2025
Tracked Since
Feb 18, 2026