PT-2025-48696 · Entrust · Nshield Connect Xc+2

Published 2025-12-02 · Updated 2025-12-02 · CVE-2025-59705

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version 13.7

Description A physically proximate attacker can escalate privileges by enabling the USB interface through chassis probe insertion during system boot. This is also known as "Unauthorized Reactivation of the USB interface" or F01.

Recommendations Entrust nShield Connect XC versions through 13.6.11: Ensure the USB interface is disabled during system boot. Entrust nShield 5c versions through 13.6.11: Ensure the USB interface is disabled during system boot. Entrust nShield HSMi versions through 13.6.11: Ensure the USB interface is disabled during system boot. Entrust nShield Connect XC version 13.7: Ensure the USB interface is disabled during system boot. Entrust nShield 5c version 13.7: Ensure the USB interface is disabled during system boot. Entrust nShield HSMi version 13.7: Ensure the USB interface is disabled during system boot.

Exploit

Fix

LPE

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2025-59705

GHSA-6Q4X-M86J-GFWJ

Affected Products

Nshield 5C

Nshield Connect Xc

Nshield Hsmi

References · 6

• 🔥 https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj · Exploit
• https://osv.dev/vulnerability/CVE-2025-59705 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59705 · Security Note
• https://t.me/CVEtracker/38685 · Telegram Post
• https://entrust.com/use-case/why-use-an-hsm · Note
• https://twitter.com/CVEnew/status/1995876191165714775 · Twitter Post