CVE-2025-59705: Medium severity Entrust nShield Connect XC vulnerability
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to Escalate Privileges by enabling the USB interface through chassis probe insertion during system boot, aka "Unauthorized Reactivation of the USB interface" or F01.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59705?
CVE-2025-59705 is considered a high-severity vulnerability due to potential privilege escalation.
How do I fix CVE-2025-59705?
To mitigate CVE-2025-59705, ensure that the USB interface is disabled during the system boot of affected Entrust products.
Who is affected by CVE-2025-59705?
CVE-2025-59705 affects users of Entrust nShield Connect XC, nShield 5c, and nShield HSMi versions up to 13.6.11 and 13.7.
What is the nature of CVE-2025-59705?
CVE-2025-59705 allows a physically proximate attacker to escalate privileges by enabling the USB interface through chassis probe insertion.
Is there a workaround for CVE-2025-59705?
A potential workaround for CVE-2025-59705 is restricting physical access to affected systems to prevent unauthorized manipulation.