CVE-2025-59695
Critical · 9.8CVSS
9.8
EPSS
0.7%
Published
Dec 2, 2025
CISA due date
—
The record
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a user with OS root access to alter firmware on the Chassis Management Board (without Authentication). This is called F04.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-59693 The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi… Same vulnerability
- CVE-2025-59696 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59699 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59700 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59701 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59703 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59704 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59705 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability