CVE-2025-59704 – Entrust nShield Connect XC, nShield 5c, and nShield HSMi BIOS Password Bypass

The following table lists the changes that have been made to the
CVE-2025-59704 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Dec. 02, 2025

    Action Type Old Value New Value
    Added Description Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password.
    Added Reference https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj
    Added Reference https://www.entrust.com/use-case/why-use-an-hsm
Share the Post:

Related Posts