Read the docs
TI-2025-37165 Aliases CVE-2025-59704GHSA-3c73-5g33-8g22

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7…

Priority HIGH 75CWE-287Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-287.

Summary

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow an attacker to gain access the the BIOS menu because is has no password.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00284 20th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*before 13.6.12; 13.7 to before 13.9.0VulnerableEntrust Corporation
cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*not specified by NVDRunning onEntrust Corporation
cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*before 13.6.12; 13.7 to before 13.9.0VulnerableEntrust Corporation
cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*not specified by NVDRunning onEntrust Corporation
cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*before 13.6.12; 13.7 to before 13.9.0VulnerableEntrust Corporation
cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*not specified by NVDRunning onEntrust Corporation
cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*before 13.6.12; 13.7 to before 13.9.0VulnerableEntrust Corporation
cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*not specified by NVDRunning onEntrust Corporation
cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*before 13.6.12; 13.7 to before 13.9.0VulnerableEntrust Corporation
cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*not specified by NVDRunning onEntrust Corporation
  • cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:* Versions before 13.6.12; 13.7 to before 13.9.0 Vulnerable ·Entrust Corporation
  • cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Entrust Corporation
  • cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:* Versions before 13.6.12; 13.7 to before 13.9.0 Vulnerable ·Entrust Corporation
  • cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Entrust Corporation
  • cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:* Versions before 13.6.12; 13.7 to before 13.9.0 Vulnerable ·Entrust Corporation
  • cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Entrust Corporation
  • cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:* Versions before 13.6.12; 13.7 to before 13.9.0 Vulnerable ·Entrust Corporation
  • cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Entrust Corporation
  • cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:* Versions before 13.6.12; 13.7 to before 13.9.0 Vulnerable ·Entrust Corporation
  • cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Entrust Corporation

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-59704
  2. 2026-10-03 Alias added: GHSA-3c73-5g33-8g22

References

Exploit 1

Other 3

  • TI-2025-37154 The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi… CVSS 3.1CRITICAL 9.8
  • TI-2025-37164 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… CVSS 3.1CRITICAL 9.1
  • TI-2025-37163 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… CVSS 3.1HIGH 7.2
  • TI-2025-37161 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… CVSS 3.1MEDIUM 5.8
  • TI-2025-37158 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… CVSS 3.1HIGH 7.2
  • TI-2025-37166 Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7… CVSS 3.1MEDIUM 6.8
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences