CVE-2025-59703CWE-284broken-access-control

CVE-2025-59703

Critical · published December 2, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
39.3
In the wild
Unconfirmed
What it is

🔥 A physically proximate attacker can dismantle Entrust nShield devices without leaving a trace — that’s an F14 attack, and it’s alarmingly easy! Think of it like a magician performing a disappearing act right under your nose, where everything looks intact after the trick is done. The attacker simply removes the tamper label and screws, gaining access without a hint of foul play! If exploited, an attacker could access critical internal components, potentially compromising sensitive cryptographic keys and data. This could lead to catastrophic breaches and data theft, leaving organizations vulnerable and exposed to significant risks. The absence of tamper evidence means you might not even know the breach occurred until it’s too late!

Put simply

Think of it like a magician performing a disappearing act right under your nose, where everything looks intact after the trick is done. The attacker simply removes the tamper label and screws, gaining access without a hint of foul play! This vulnerability allows a physically proximate attacker to gain unauthorized access to internal components of Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices without triggering any security alarms, making it a serious security concern.

What to do

If exploited, an attacker could access critical internal components, potentially compromising sensitive cryptographic keys and data. This could lead to catastrophic breaches and data theft, leaving organizations vulnerable and exposed to significant risks. The absence of tamper evidence means you might not even know the breach occurred until it’s too late! Immediate action is essential! Ensure to patch to versions 13.6.12 or 13.7.1 to mitigate this risk. Additionally, evaluate physical security measures around your devices to prevent unauthorized access. Regularly inspect tamper seals to spot any potential manipulations. You've got this! With swift action, you can secure your systems and keep those pesky magicians at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00466 · 39.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-12-02T21:15Z
Affected products (10)
ProductVersionsFixed in
entrust/nshield_5c_firmware< 13.6.1213.6.12
entrust/nshield_5c_firmware≥ 13.7, < 13.9.013.9.0
entrust/nshield_hsmi_firmware< 13.6.1213.6.12
entrust/nshield_hsmi_firmware≥ 13.7, < 13.9.013.9.0
entrust/nshield_connect_xc_base_firmware< 13.6.1213.6.12
entrust/nshield_connect_xc_base_firmware≥ 13.7, < 13.9.013.9.0
entrust/nshield_connect_xc_mid_firmware< 13.6.1213.6.12
entrust/nshield_connect_xc_mid_firmware≥ 13.7, < 13.9.013.9.0
entrust/nshield_connect_xc_high_firmware< 13.6.1213.6.12
entrust/nshield_connect_xc_high_firmware≥ 13.7, < 13.9.013.9.0
References (4)
EPSS history
Timeline
  • 02 DEC 00:00Z
    Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of…
    cvelistv5