Skip to main content

Nshield 5c Firmware CVE-2025-59700

| EUVDEUVD-2025-200254 LOW
Insufficient Verification of Data Authenticity (CWE-345)
2025-12-02 cve@mitre.org
3.9
CVSS 3.1 · NVD

Severity by source

NVD PRIMARY
3.9 LOW
AV:P/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Physical
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Lifecycle Timeline

4
EUVD ID Assigned
Mar 15, 2026 - 14:04 euvd
EUVD-2025-200254
Analysis Generated
Mar 15, 2026 - 14:04 vuln.today
PoC Detected
Jan 06, 2026 - 21:15 vuln.today
Public exploit code
CVE Published
Dec 02, 2025 - 15:15 nvd
LOW 3.9

DescriptionNVD

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).

Analysis

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with root access to modify the Recovery Partition (because of a lack of integrity protection).

Technical ContextAI

This vulnerability is classified as Insufficient Verification of Data Authenticity (CWE-345).

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

CVE-2025-59695 CRITICAL POC
9.8 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a user with OS root access to a

CVE-2025-59693 CRITICAL POC
9.8 Dec 02

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow

CVE-2025-59703 CRITICAL POC
9.1 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker

CVE-2025-59702 HIGH POC
7.2 Dec 02

A privilege escalation vulnerability (CVSS 7.2) that allows a physically proximate attacker with elevated privileges. Ri

CVE-2025-59697 HIGH POC
7.2 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker

CVE-2025-59705 MEDIUM POC
6.8 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker

CVE-2025-59699 MEDIUM POC
6.8 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker

CVE-2025-59698 MEDIUM POC
6.8 Dec 02

CVE-2025-59698 is a security vulnerability (CVSS 6.8) that allows a physically proximate attacker. Risk factors: public

CVE-2025-59694 MEDIUM POC
6.8 Dec 02

CVE-2025-59694 is a security vulnerability (CVSS 6.8) that allows a physically proximate attacker. Risk factors: public

CVE-2025-59704 MEDIUM POC
4.6 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the

CVE-2025-59701 MEDIUM POC
4.1 Dec 02

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker

CVE-2025-59696 LOW POC
3.2 Dec 02

CVE-2025-59696 is a security vulnerability (CVSS 3.2) that allows a physically proximate attacker. Risk factors: public

Share

CVE-2025-59700 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy