CVE-2025-59695
CWE-306Published: December 2, 2025· Updated: Jun 17, 2026
Official Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04.
Risk Analysis
This critical vulnerability in Entrust nShield Connect XC, nShield 5c, and nShield HSMi allows a user with OS root access to alter firmware on the Chassis Management Board without authentication. With a CVSS score of 9.8, this flaw is highly severe and could lead to complete system compromise. The absence of an EPSS score means there is no current data on its exploitation likelihood, but its critical severity warrants immediate attention.
No public exploit is currently known for this vulnerability. Exploitation requires existing OS root access on the device.
Users of affected Entrust nShield devices should ensure that OS root access is tightly controlled and monitored. Consult Entrust for specific patching or mitigation guidance for versions through 13.6.11 or 13.7.
Technical Analysis
CVE-2025-59695 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.
The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.
A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.
CVSS v3.1 Vector Breakdown
Affected Vendors & Products
Exploit & PoC Resources
Official Patches & Advisories
All References (2)
Quick Facts
Related CVEs (CWE-306)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2025-59695 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts