CVE-2025-59693

· CRITICALAnalyzed

← All CVEs

CVSS v3.1

9.8

EPSS

0.74%

Published

Dec 2, 2025

Modified

Dec 15, 2025

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-269

Affected Products (15)

entrust · nshield_5c_firmware (up to 13.6.12)vulnerable

entrust · nshield_5c_firmware (up to 13.9.0)vulnerable

entrust · nshield_5c

entrust · nshield_hsmi_firmware (up to 13.6.12)vulnerable

entrust · nshield_hsmi_firmware (up to 13.9.0)vulnerable

entrust · nshield_hsmi

entrust · nshield_connect_xc_base_firmware (up to 13.6.12)vulnerable

entrust · nshield_connect_xc_base_firmware (up to 13.9.0)vulnerable

entrust · nshield_connect_xc_base

entrust · nshield_connect_xc_mid_firmware (up to 13.6.12)vulnerable

entrust · nshield_connect_xc_mid_firmware (up to 13.9.0)vulnerable

entrust · nshield_connect_xc_mid

entrust · nshield_connect_xc_high_firmware (up to 13.6.12)vulnerable

entrust · nshield_connect_xc_high_firmware (up to 13.9.0)vulnerable

entrust · nshield_connect_xc_high

References (2)

https://github.com/google/security-research/security/advisories/GHSA-6q4x-m86j-gfwj

ExploitThird Party Advisory

https://www.entrust.com/use-case/why-use-an-hsm

Product

KEV Catalog EPSS Scores Vendors All CVEs