CVE-2025-59703
CriticalCVSS 9.1Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11 or 13.7 (patched in 13.6.12 LTS and 13.9.0 STS) allow a physically proximate attacker to access internal components of the appliance without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws without damaging the device. This is called an F14 attack.
Risk Assessment
Physical attack could allow access to internal components, potentially compromising HSM security and keys.
Recommendation
Apply available firmware updates (13.6.12 LTS or 13.9.0 STS). Ensure physical security of devices and regularly inspect tamper labels and screws.
Original NVD description (English source)
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack.