CVE-2025-59699
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/12/2025
Last modified:
02/12/2025
Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker to escalate privileges by booting from a USB device with a valid root filesystem. This occurs because of insecure default settings in the Legacy GRUB Bootloader.