CVE-2025-59703

Source
https://cve.org/CVERecord?id=CVE-2025-59703
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59703.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-59703
Aliases
Published
2025-12-02T16:15:55.317Z
Modified
2026-03-16T03:12:39.968387Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a Physically Proximate Attacker to access the internal components of the appliance, without leaving tamper evidence. To exploit this, the attacker needs to remove the tamper label and all fixing screws from the device without damaging it. This is called an F14 attack.

References

Affected packages

Git /

Affected ranges

Database specific

unresolved_ranges
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "13.6.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.7"
            },
            {
                "fixed": "13.9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "13.6.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.7"
            },
            {
                "fixed": "13.9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "13.6.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.7"
            },
            {
                "fixed": "13.9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "13.6.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.7"
            },
            {
                "fixed": "13.9.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "13.6.12"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "13.7"
            },
            {
                "fixed": "13.9.0"
            }
        ]
    }
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-59703.json"