CVE-2025-59703
Full vulnerability record from the local CVENow database.
Description
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack.
Severity
CRITICAL
CVSS score
9.1
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2025-12-02 16:15:55.317000
Last modified
2026-11-04 23:10:00.223000
View original CVE JSON
{
"id": "CVE-2025-59703",
"sourceIdentifier": "[email protected]",
"published": "2025-12-02T16:15:55.317",
"lastModified": "2026-11-04T23:10:00.223",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack."
},
{
"lang": "es",
"value": "Entrust nShield Connect XC, nShield 5c y nShield HSMi hasta la versión 13.6.11, o 13.7, permiten a un atacante físicamente próximo acceder a los componentes internos del dispositivo, sin dejar evidencia de manipulación. Para explotar esto, el atacante necesita quitar la etiqueta de manipulación y todos los tornillos de fijación del dispositivo sin dañarlo. Esto se denomina un ataque F14."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"version": "n/a",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-12-03T14:45:18.438780Z",
"id": "CVE-2025-59703",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CFB3D135-8EAC-4053-BB94-18D5BBB24AE7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_5c_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "ED259AB7-BFED-4B97-B455-E1D34730CFFF"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_5c:-:*:*:*:*:*:*:*",
"matchCriteriaId": "2BB0F3F8-F5DE-41CB-B804-BBFB78C6ADEB"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "ED3AEBBD-7F75-47F1-8EEA-342BAC9D265E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_hsmi_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "D7125CC3-3B27-4C90-97DE-51D226FBDC00"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_hsmi:-:*:*:*:*:*:*:*",
"matchCriteriaId": "F7665EE9-9F7F-456F-B172-ED188DD3BAD4"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "F73858FD-5FE6-4AFA-84F2-E19743E9D900"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_base_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "01CDF5EE-9059-478A-BFE5-D7ADEF9625C4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_base:-:*:*:*:*:*:*:*",
"matchCriteriaId": "18FCA0E9-EEA9-40EC-9E0F-942F049D2354"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "5A54F973-25D8-468D-B6A4-240A95D94A0B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_mid_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "0E43D1A7-9CB7-479D-89A9-D5041BB212A4"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_mid:-:*:*:*:*:*:*:*",
"matchCriteriaId": "CB0ACAD9-BBCE-43CC-BD84-2023885725EE"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "13.6.12",
"matchCriteriaId": "CBC11D8B-D72E-4CE9-AE61-AEA85F122F22"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:entrust:nshield_connect_xc_high_firmware:*:*:*:*:*:*:*:*",
"versionStartIncluding": "13.7",
"versionEndExcluding": "13.9.0",
"matchCriteriaId": "1D7048C8-EB43-4F23-8946-456EF6F3A1B7"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:entrust:nshield_connect_xc_high:-:*:*:*:*:*:*:*",
"matchCriteriaId": "3F0EDB1F-932B-4EC5-9D09-03CAD98BC2FA"
}
]
}
]
}
],
"references": [
{
"url": "https://github.com/advisories/GHSA-h78c-68qv-3qg9",
"source": "[email protected]"
},
{
"url": "https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj",
"source": "[email protected]",
"tags": [
"Exploit",
"Third Party Advisory"
]
},
{
"url": "https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025",
"source": "[email protected]"
},
{
"url": "https://www.entrust.com/use-case/why-use-an-hsm",
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}