CVE-2025-59693
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to obtain debug access and escalate privileges by…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.90%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.90% probability · 58th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-269
- Affected
- entrust/nshield 5c firmware · entrust/nshield hsmi firmware · entrust/nshield connect xc base firmware · entrust/nshield connect xc mid firmware · entrust/nshield connect xc high firmware
- Source
- cve@mitre.org
References
- https://github.com/advisories/GHSA-j3px-xpp5-mpfc
- https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwjExploit, Third Party Advisory
- https://www.entrust.com/knowledgebase/hardware/understanding-nshield-security-advisory-september-2025
- https://www.entrust.com/use-case/why-use-an-hsmProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.