CVE-2025-59702: High severity Entrust nShield Connect XC vulnerability
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Entrust nShield Connect XC, nShield 5c, nShield HSMito a version that resolves this vulnerability.Fixed in 13.6.12 - Upgrade
Upgrade
Entrust nShield Connect XC, nShield 5c, nShield HSMito a version that resolves this vulnerability.Fixed in 13.9.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59702?
CVE-2025-59702 is considered a high-severity vulnerability due to its potential for exploitation by a physically proximate attacker with elevated privileges.
How do I fix CVE-2025-59702?
To fix CVE-2025-59702, ensure that your Entrust nShield Connect XC, nShield 5c, and nShield HSMi devices are updated to the latest patched version.
What vulnerabilities are associated with CVE-2025-59702?
CVE-2025-59702 specifically allows an attacker to falsify tamper events, compromising the integrity of the nShield devices.
Who is affected by CVE-2025-59702?
Organizations using Entrust nShield Connect XC, nShield 5c, and nShield HSMi versions up to 13.6.11 are affected by CVE-2025-59702.
What should I monitor for concerning CVE-2025-59702?
You should monitor for any unauthorized physical access to devices and ensure proper logging of tamper events to detect potential breaches related to CVE-2025-59702.