CVE-2025-59699
Medium · 6.8CVSS
6.8
EPSS
0.3%
Published
Dec 2, 2025
CISA due date
—
The record
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-59693 The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi… Same vulnerability
- CVE-2025-59695 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59696 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59700 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59701 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59703 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59704 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability
- CVE-2025-59705 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… Same vulnerability