CVE-2025-59693
Unknown
Unknown - Not Provided
BaseFortify
Publication date: 2025-12-02
Last updated on: 2025-12-15
Assigner: MITRE
Description
Description
The Chassis Management Board in Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allows a physically proximate attacker to obtain debug access and escalate privileges by bypassing the tamper label and opening the chassis without leaving evidence, and accessing the JTAG connector. This is called F02.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| entrust | nshield_5c_firmware | to 13.6.12 (exc) |
| entrust | nshield_5c_firmware | From 13.7.3 (inc) to 13.9.0 (exc) |
| entrust | nshield_5c | * |
| entrust | nshield_hsmi_firmware | to 13.6.12 (exc) |
| entrust | nshield_hsmi_firmware | From 13.7.3 (inc) to 13.9.0 (exc) |
| entrust | nshield_hsmi | * |
| entrust | nshield_connect_xc_base_firmware | to 13.6.12 (exc) |
| entrust | nshield_connect_xc_base_firmware | From 13.7.3 (inc) to 13.9.0 (exc) |
| entrust | nshield_connect_xc_base | * |
| entrust | nshield_connect_xc_mid_firmware | to 13.6.12 (exc) |
| entrust | nshield_connect_xc_mid_firmware | From 13.7.3 (inc) to 13.9.0 (exc) |
| entrust | nshield_connect_xc_mid | * |
| entrust | nshield_connect_xc_high_firmware | to 13.6.12 (exc) |
| entrust | nshield_connect_xc_high_firmware | From 13.7.3 (inc) to 13.9.0 (exc) |
| entrust | nshield_connect_xc_high | * |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-269 | The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. |
