CVE-2025-59705
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-02

Last updated on: 2025-12-08

Assigner: MITRE

Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-02
Last Modified
2025-12-08
Generated
2026-06-16
AI Q&A
2025-12-02
EPSS Evaluated
2026-06-15
NVD
CVE-2025-59705
Affected Vendors & Products
Showing 15 associated CPEs
Vendor Product Version / Range
entrust nshield_5c_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_5c *
entrust nshield_hsmi_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_hsmi_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_hsmi *
entrust nshield_connect_xc_base_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_base_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_base *
entrust nshield_connect_xc_mid_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_mid_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_mid *
entrust nshield_connect_xc_high_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_high_firmware From 13.7 (inc) to 13.9.0 (inc)
entrust nshield_connect_xc_high *
entrust nshield_5c_firmware From 13.7 (inc) to 13.9.0 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability affects Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices up to versions 13.6.11 and 13.7. It allows a physically proximate attacker to escalate privileges by enabling the USB interface through inserting a chassis probe during system boot. This unauthorized reactivation of the USB interface can lead to elevated access on the device.

Impact Analysis

The vulnerability can allow an attacker who has physical access to the device to escalate their privileges by reactivating the USB interface during system boot. This could potentially lead to unauthorized access or control over the device, compromising its security and the sensitive operations it performs.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-59705. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart