CVE-2025-59693
Full vulnerability record from the local CVENow database.
Description
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02.
Severity
CRITICAL
CVSS score
9.8
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2025-12-02 15:15:54.747000
Last modified
2026-11-04 23:10:00.223000
View original CVE JSON
{
"id": "CVE-2025-59693",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T15:15:54.747",
"lastModified": "2026-11-04T23:10:00.223",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02."
},
{
"lang": "es",
"value": "La Placa de Gestión del Chasis en Entrust nShield Connect XC, nShield 5c y nShield HSMi hasta 13.6.11, o 13.7, permite a un atacante físicamente próximo obtener acceso de depuración y escalar privilegios al eludir la etiqueta antimanipulación, abrir el chasis sin dejar evidencia y acceder al conector JTAG. Esto se denomina F02."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"version": "n/a",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-12-03T14:42:06.306201Z",
"id": "CVE-2025-59693",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-269"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "A225C602-A46C-43A1-B6ED-D85CE086FB13"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "8CA1F545-ADAE-41BF-946A-CEAD5A751BB7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "65C6EC9C-C33D-4C37-ACD3-4B78D6291000"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "125D948A-49AA-4385-8519-081F0787417E"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7.3",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "7779DADF-6D63-4326-981F-BA10860BBDD9"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/advisories/GHSA-j3px-xpp5-mpfc",
"source": "[email protected]"
},
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025",
"source": "[email protected]"
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}