CVE-2025-59700
LOWEntrust Nshield 5C Firmware < 13.6.12 - Data Authenticity Bypass
Title source: ruleDescription
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).
Scores
CVSS v3
3.9
EPSS
0.0000
EPSS Percentile
0.1%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
yes
Technical Impact
total
Details
CWE
CWE-345
Status
published
Products (5)
entrust/nshield_5c_firmware
< 13.6.12
entrust/nshield_connect_xc_base_firmware
< 13.6.12
entrust/nshield_connect_xc_high_firmware
< 13.6.12
entrust/nshield_connect_xc_mid_firmware
< 13.6.12
entrust/nshield_hsmi_firmware
< 13.6.12
Published
Dec 02, 2025
Tracked Since
Feb 18, 2026