PT-2025-48701 · Entrust · Nshield Connect Xc+2

Published 2025-12-02 · Updated 2026-01-06 · CVE-2025-59700

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Medium

Base vector

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Entrust nShield Connect XC versions through 13.6.11 Entrust nShield 5c versions through 13.6.11 Entrust nShield HSMi versions through 13.6.11 Entrust nShield Connect XC version 13.7 Entrust nShield 5c version 13.7 Entrust nShield HSMi version 13.7

Description The Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices are susceptible to a condition where a physically proximate attacker with root access can alter the Recovery Partition due to insufficient integrity protection.

Recommendations Update Entrust nShield Connect XC to a version later than 13.6.11 or 13.7. Update Entrust nShield 5c to a version later than 13.6.11 or 13.7. Update Entrust nShield HSMi to a version later than 13.6.11 or 13.7.

Exploit

Fix

LPE

Insufficient Verification of Data Authenticity

Weakness Enumeration

CWE-345

Related Identifiers

CVE-2025-59700

GHSA-6Q4X-M86J-GFWJ

Affected Products

Nshield 5C

Nshield Connect Xc

Nshield Hsmi

References · 8

• 🔥 https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-59700 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59700 · Vendor Advisory
• https://t.me/cveNotify/145177 · Telegram Post
• https://t.me/CVEtracker/38682 · Telegram Post
• https://t.me/cveNotify/147906 · Telegram Post
• https://twitter.com/CVEnew/status/1995876188208644181 · Twitter Post
• https://entrust.com/use-case/why-use-an-hsm · Note