CVE-2025-59703: Critical severity Entrust nShield Connect XC vulnerability
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59703?
CVE-2025-59703 is classified as a high severity vulnerability due to the risk of physical access exploitation without tamper evidence.
How do I fix CVE-2025-59703?
To mitigate CVE-2025-59703, ensure physical security measures are enforced to prevent unauthorized access to Entrust nShield appliances.
Who is affected by CVE-2025-59703?
CVE-2025-59703 affects users of Entrust nShield Connect XC, nShield 5c, and nShield HSMi appliances running version 13.6.11 through 13.7.
What are the potential impacts of CVE-2025-59703?
The impact of CVE-2025-59703 includes unauthorized access to internal components, which could compromise the integrity and security of cryptographic operations.
Is there a patch for CVE-2025-59703?
As of now, there is no specific patch released for CVE-2025-59703, and users should focus on implementing physical security controls.