NexaPulse
Subscribe
9.1criticalCritical

CVE-2025-59703

Entrust Nshield 5c Firmware

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack.

Exploitation status

  • Published references include exploit or proof-of-concept material. There is no confirmation it is being used in real attacks.

What the metrics mean

  • It is reachable over a network, without needing local access.
  • For an attacker who can reach it, no special conditions are needed to exploit it.
  • To exploit it, no account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
9.1 (v3.1)
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-284
Assigned by
cve@mitre.org

Dates

Published
2025-12-02
Last modified
2026-08-26
Sources
NVD

Affected products

  • Entrust Nshield 5c Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield 5call versions
  • Entrust Nshield Hsmi Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield Hsmiall versions
  • Entrust Nshield Connect Xc Base Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield Connect Xc Baseall versions
  • Entrust Nshield Connect Xc Mid Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield Connect Xc Midall versions
  • Entrust Nshield Connect Xc High Firmware- 13.6.12, 13.7 - 13.9.0
  • Entrust Nshield Connect Xc Highall versions

As listed in the NVD configuration data. Not a statement about your estate.

References