STMicroelectronics J-SAFE3 Firmware 1.2.5
Approved changes feed: RSS · Atom
cpe:2.3:o:st:j-safe3_firmware:1.2.5:*:*:*:*:*:*:*
part: o version: 1.2.5 update: *
| Vendor | St (53c12992-bb08-5830-87b5-2d1cf2314a51) |
|---|---|
| Product | J Safe3 Firmware (0bb61b39-1d40-5160-b699-3ba111b5933c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43393 |
vulnerable | 2026-06-08 05:36:43.321558 |
Details available
STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse signature verification. This is associated with the ECDSA signature algorithm on the Java Card J-SAFE3 and STSAFE-J platforms exposing a 3.0.4 Java Card API. It is exploitable for STSAFE-J in closed configuration and J-SIGN (when signature verification is activated) but not for J-SAFE3 EPASS BAC and EAC products. It might also impact other products based on the J-SAFE-3 Java Card platform.
Published: 2022-03-04T12:54:50.000Z
Updated: 2024-08-04T03:55:28.645Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43392 |
vulnerable | 2026-06-08 05:36:43.317652 |
Details available
STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptographic secrets. This is associated with the ECDSA signature algorithm on the Java Card J-SAFE3 and STSAFE-J platforms exposing a 3.0.4 Java Card API. It is exploitable for STSAFE-J in closed configuration and J-SIGN (when signature verification is activated) but not for J-SAFE3 EPASS BAC and EAC products. It might also impact other products based on the J-SAFE-3 Java Card platform.
Published: 2022-03-04T12:54:53.000Z
Updated: 2024-08-04T03:55:28.821Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.