CVE-2025-59695

The vulnerability classified as CWE-306 (missing authentication for critical function) involves the Chassis Management Board firmware update mechanism not verifying the identity of the entity initiating the operation. A user with root privileges at the operating system level of the device can directly upload and install modified or malicious firmware on the CMB, bypassing any authorization controls. The manufacturer identifies this vulnerability internally as F04.

An attacker with root access to the device's operating system can permanently modify CMB firmware, which may lead to complete compromise of HSM module integrity, loss of confidentiality of stored cryptographic keys, and establishment of persistence of malicious code at the hardware level, which is difficult to detect and remove.

Apply patches available from the manufacturer according to the references. As a risk-limiting measure, strictly control and limit root access to the operating system of nShield devices, applying the principle of least privilege and monitoring any attempts to gain administrative access to these devices.

Entrust nShield Connect XC, nShield 5c and nShield HSMi in versions up to 13.6.11 inclusive and 13.7. Affects products: nShield Connect XC Mid, nShield Connect XC Base, nShield Connect XC Base Firmware, nShield HSMi Firmware, nShield HSMi.