CVE-2025-59699

published 2025-12-02

CVE-2025-59699: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by booting from…

Priority P4 34 medium 6.8 CVSS 3.1

AV P AC L PR N UI N S U C H I H A H

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
entrust	nshield_5c_firmware	< 13.6.12	13.6.12
entrust	nshield_5c_firmware	>= 13.7 < 13.9.0	13.9.0
entrust	nshield_connect_xc_base_firmware	< 13.6.12	13.6.12
entrust	nshield_connect_xc_base_firmware	>= 13.7 < 13.9.0	13.9.0
entrust	nshield_connect_xc_high_firmware	< 13.6.12	13.6.12
entrust	nshield_connect_xc_high_firmware	>= 13.7 < 13.9.0	13.9.0
entrust	nshield_connect_xc_mid_firmware	< 13.6.12	13.6.12
entrust	nshield_connect_xc_mid_firmware	>= 13.7 < 13.9.0	13.9.0
entrust	nshield_hsmi_firmware	< 13.6.12	13.6.12
entrust	nshield_hsmi_firmware	>= 13.7 < 13.9.0	13.9.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-290