by Kastro
Paper/Archive/CVE-2025-59703

CVE-2025-59703

mitre — Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Ph…

EPSS 0.5%public exploitCVSS 9.1
critical.is priorityof 100
45
CVSS 9.1 (ADP)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 40.3.403 × 208.1Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refentrust.com/use-case/why-use-an-hsmrefgithub.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwjrefentrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025refgithub.com/advisories/GHSA-h78c-68qv-3qg9