CVE-2025-59693: Critical severity Entrust nShield Connect XC vulnerability
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59693?
CVE-2025-59693 is considered critical due to the ease of exploitation and the potential for privilege escalation by a physical attacker.
How do I fix CVE-2025-59693?
To fix CVE-2025-59693, upgrade the affected Entrust nShield products to versions beyond 13.6.11 that address this vulnerability.
What systems are affected by CVE-2025-59693?
CVE-2025-59693 affects Entrust nShield Connect XC, nShield 5c, and nShield HSMi systems up to version 13.6.11.
What type of access does CVE-2025-59693 allow an attacker?
CVE-2025-59693 allows an attacker with physical proximity to obtain debug access and escalate privileges.
What should I do if I cannot upgrade my system to mitigate CVE-2025-59693?
If you cannot upgrade, consider implementing physical security measures to restrict access to the devices affected by CVE-2025-59693.