CVE-2025-59698

MEDIUM

Published Dec 2, 2025 Modified Dec 8, 2025 CWE-1270

Description

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader.

CVSS v3.1 Score

6.8

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-1270 CWE-1270

Affected Products

Vendor	Product	Versions
entrust	nshield_5c_firmware	< 13.6.12
entrust	nshield_5c_firmware	13.7 — 13.9.0
entrust	nshield_5c	All
entrust	nshield_hsmi_firmware	< 13.6.12
entrust	nshield_hsmi_firmware	13.7 — 13.9.0
entrust	nshield_hsmi	All
entrust	nshield_connect_xc_base_firmware	< 13.6.12
entrust	nshield_connect_xc_base_firmware	13.7 — 13.9.0
entrust	nshield_connect_xc_base	All
entrust	nshield_connect_xc_mid_firmware	< 13.6.12
entrust	nshield_connect_xc_mid_firmware	13.7 — 13.9.0
entrust	nshield_connect_xc_mid	All
entrust	nshield_connect_xc_high_firmware	< 13.6.12
entrust	nshield_connect_xc_high_firmware	13.7 — 13.9.0
entrust	nshield_connect_xc_high	All

References

Exploits

https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj

Other References

https://www.entrust.com/use-case/why-use-an-hsm

Frequently Asked Questions

What is CVE-2025-59698? +

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, might allow a physically proximate attacker to gain access to the EOL legacy bootloader. It has a CVSS v3.1 base score of 6.8 (MEDIUM).

How severe is CVE-2025-59698? +

CVE-2025-59698 has a CVSS v3.1 score of 6.8 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2025-59698? +

CVE-2025-59698 affects products from entrust, specifically: nshield_5c, nshield_5c_firmware, nshield_connect_xc_base, nshield_connect_xc_base_firmware, nshield_connect_xc_high, nshield_connect_xc_high_firmware, nshield_connect_xc_mid, nshield_connect_xc_mid_firmware, nshield_hsmi, nshield_hsmi_firmware. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-59698? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2023-32188

A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging …

CVE-2025-59695 9.8

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a user with OS root access …

CVE-2025-59693 9.8

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a …

CVE-2025-59703 9.1

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access …

CVE-2025-59697 7.2

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate …

CVE-2025-59702 7.2

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated …

Quick Facts

CVSS Score: 6.8
Severity: MEDIUM
Published: Dec 2, 2025

Scan for this vulnerability

Check if your website or infrastructure is affected by CVE-2025-59698.

Website Scan Port Scan

Browse CVEs

Critical High CISA KEV ! Most likely exploited →