CVE-2025-59702: Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify…

PriorityP335high7.2CVSS 3.1

AVPACLPRHUINSCCHIHAH

EPSS

0.26%

17.3th percentile

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7, allow a physically proximate attacker with elevated privileges to falsify tamper events by accessing internal components.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
entrust	nshield_5c_firmware	< 13.6.12	13.6.12
entrust	nshield_5c_firmware	>= 13.7 < 13.9.0	13.9.0
entrust	nshield_connect_xc_base_firmware	< 13.6.12	13.6.12
entrust	nshield_connect_xc_base_firmware	>= 13.7 < 13.9.0	13.9.0
entrust	nshield_connect_xc_high_firmware	< 13.6.12	13.6.12
entrust	nshield_connect_xc_high_firmware	>= 13.7 < 13.9.0	13.9.0
entrust	nshield_connect_xc_mid_firmware	< 13.6.12	13.6.12
entrust	nshield_connect_xc_mid_firmware	>= 13.7 < 13.9.0	13.9.0
entrust	nshield_hsmi_firmware	< 13.6.12	13.6.12
entrust	nshield_hsmi_firmware	>= 13.7 < 13.9.0	13.9.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.