Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow an attacker to gain access the the BIOS menu because is has no password.
cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:* - NOT VULNERABLE
Entrust nShield Connect XC <= 13.6.11
Entrust nShield 5c <= 13.6.11
Entrust nShield HSMi <= 13.6.11
Entrust nShield Connect XC 13.7
Entrust nShield 5c 13.7
Entrust nShield HSMi 13.7
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# CVE-2025-59704 PoC - Physical Access to Entrust nShield HSM BIOS
# This PoC demonstrates the physical access requirement for exploiting this vulnerability
print("CVE-2025-59704 Proof of Concept")
print("=" * 50)
print("Target: Entrust nShield Connect XC, nShield 5c, nShield HSMi")
print("Affected Versions: <= 13.6.11, 13.7")
print()
poc_steps = """
Physical Exploitation Steps:
1. Physical Access Required
- Gain physical access to the nShield HSM device
- Locate the device console port or direct interface
2. Reboot the Device
- Power cycle the nShield HSM device
- Or press the physical reset button if available
3. Enter BIOS Setup
- During boot, press the appropriate BIOS key (typically DEL, F2, or ESC)
- The key varies by hardware platform but no password is required
4. Unauthorized BIOS Access
- Access BIOS configuration without authentication
- View and modify all BIOS settings
5. Exploitation Options:
a) Modify boot order to boot from external USB/CD
b) Disable secure boot
c) Extract firmware for reverse engineering
d) Modify security configurations
e) Reset administrator credentials
6. Persistence
- Flash malicious firmware if desired
- Configure backdoor access
- Extract stored encryption keys
Note: This is a physical security vulnerability. Remote exploitation is NOT possible.
The only mitigation is physical security controls and firmware updates from Entrust.
"""
print(poc_steps)
# Technical Notes
notes = """
CVSS 3.1 Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack Vector: Physical (AV:P)
Attack Complexity: Low (AC:L)
Privileges Required: None (PR:N)
User Interaction: None (UI:N)
Scope: Unchanged (S:U)
Confidentiality Impact: None (C:N)
Integrity Impact: High (I:H)
Availability Impact: None (A:N)
Base Score: 4.6 (Medium)
"""
print(notes)