{"id":"CVE-2025-59704","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-59704","generatedAt":"2026-10-28T05:46:37.489Z","title":"Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.","description":"Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.","published":"2025-12-02T16:15:55.000Z","lastModified":"2026-08-26T16:16:24.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.1","score":4.6,"severity":"MEDIUM","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-287"],"affected":["entrust/nshield 5c firmware","entrust/nshield hsmi firmware","entrust/nshield connect xc base firmware","entrust/nshield connect xc mid firmware","entrust/nshield connect xc high firmware"],"epss":{"score":0.00264,"percentile":0.18279,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://github.com/advisories/GHSA-3c73-5g33-8g22","source":"cve@mitre.org"},{"url":"https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj","tags":["Exploit","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025","source":"cve@mitre.org"},{"url":"https://www.entrust.com/use-case/why-use-an-hsm","tags":["Product"],"source":"cve@mitre.org"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-59704","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}