Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04.
References
- www.cve.org/CVERecord ↗
- nvd.nist.gov/vuln/detail/CVE-2025-59695 ↗
- github.com/advisories/GHSA-w5fv-rcj5-pmj9 ↗
- github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj ↗
- www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025 ↗
- www.entrust.com/use-case/why-use-an-hsm ↗
Related CVEs
← CVE Index: search every CVE from the last 30 days
This product uses the NVD API but is not endorsed or certified by the NVD. CVSS scores do not establish exploitation.