CVE-2025-59698
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-02

Last updated on: 2025-12-08

Assigner: MITRE

Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-02
Last Modified
2025-12-08
Generated
2026-06-16
AI Q&A
2025-12-02
EPSS Evaluated
2026-06-14
NVD
CVE-2025-59698
Affected Vendors & Products
Showing 15 associated CPEs
Vendor Product Version / Range
entrust nshield_5c_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_5c *
entrust nshield_hsmi_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_hsmi *
entrust nshield_connect_xc_base_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_base_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_base *
entrust nshield_connect_xc_mid_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_mid_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_mid *
entrust nshield_connect_xc_high_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_high_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_high *
entrust nshield_5c_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_hsmi_firmware From 13.7 (inc) to 13.9.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-1270 The product implements a Security Token mechanism to differentiate what actions are allowed or disallowed when a transaction originates from an entity. However, the Security Tokens generated in the system are incorrect.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability affects Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices up to versions 13.6.11 and 13.7. It might allow an attacker who is physically close to the device to gain access to the end-of-life (EOL) legacy bootloader, which is a component used during the device's startup process.

Impact Analysis

If exploited, this vulnerability could allow a physically proximate attacker to access the legacy bootloader of the affected devices. This could potentially lead to unauthorized control or manipulation of the device during its boot process, compromising the security and integrity of the device.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-59698. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart