CVE-2025-59693

An attacker with physical access to the device is able to bypass the tamper-evident label and open the device enclosure without leaving traces. After opening the chassis, access is gained to the JTAG connector, which allows obtaining debug access to the Chassis Management Board. Through this interface, privilege escalation in the system is possible. The vulnerability is cataloged by the manufacturer under designation F02.

An attacker can obtain full debug access and escalate privileges on the HSM device, which may consequently lead to disclosure, modification, or destruction of protected cryptographic keys and other sensitive data stored on the module.

Patches available from the manufacturer should be applied in accordance with the references. Additionally, it is recommended to implement strict physical access controls for HSM devices, monitor the integrity of tamper-evident seals and labels, and place devices in locked, monitored server cabinets accessible only to authorized personnel.

Entrust nShield Connect XC, nShield 5c, and nShield HSMi with firmware versions up to and including 13.6.11 or version 13.7