Critical · published December 2, 2025
🔥 A physically proximate attacker can dismantle Entrust nShield devices without leaving a trace — that’s an F14 attack, and it’s alarmingly easy! Think of it like a magician performing a disappearing act right under your nose, where everything looks intact after the trick is done. The attacker simply removes the tamper label and screws, gaining access without a hint of foul play! If exploited, an attacker could access critical internal components, potentially compromising sensitive cryptographic keys and data. This could lead to catastrophic breaches and data theft, leaving organizations vulnerable and exposed to significant risks. The absence of tamper evidence means you might not even know the breach occurred until it’s too late!
Think of it like a magician performing a disappearing act right under your nose, where everything looks intact after the trick is done. The attacker simply removes the tamper label and screws, gaining access without a hint of foul play! This vulnerability allows a physically proximate attacker to gain unauthorized access to internal components of Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices without triggering any security alarms, making it a serious security concern.
If exploited, an attacker could access critical internal components, potentially compromising sensitive cryptographic keys and data. This could lead to catastrophic breaches and data theft, leaving organizations vulnerable and exposed to significant risks. The absence of tamper evidence means you might not even know the breach occurred until it’s too late! Immediate action is essential! Ensure to patch to versions 13.6.12 or 13.7.1 to mitigate this risk. Additionally, evaluate physical security measures around your devices to prevent unauthorized access. Regularly inspect tamper seals to spot any potential manipulations. You've got this! With swift action, you can secure your systems and keep those pesky magicians at bay! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| entrust/nshield_5c_firmware | < 13.6.12 | 13.6.12 |
| entrust/nshield_5c_firmware | ≥ 13.7, < 13.9.0 | 13.9.0 |
| entrust/nshield_hsmi_firmware | < 13.6.12 | 13.6.12 |
| entrust/nshield_hsmi_firmware | ≥ 13.7, < 13.9.0 | 13.9.0 |
| entrust/nshield_connect_xc_base_firmware | < 13.6.12 | 13.6.12 |
| entrust/nshield_connect_xc_base_firmware | ≥ 13.7, < 13.9.0 | 13.9.0 |
| entrust/nshield_connect_xc_mid_firmware | < 13.6.12 | 13.6.12 |
| entrust/nshield_connect_xc_mid_firmware | ≥ 13.7, < 13.9.0 | 13.9.0 |
| entrust/nshield_connect_xc_high_firmware | < 13.6.12 | 13.6.12 |
| entrust/nshield_connect_xc_high_firmware | ≥ 13.7, < 13.9.0 | 13.9.0 |