St J-SAFE3 Firmware vulnerabilities

2 CVEs affecting St J-SAFE3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-43393, published 2022-03-04.

More from St.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-43392, published 2022-03-04. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptographic secrets. This is associated with the ECDSA signature algorithm on the…
• CVE-2021-43393, published 2022-03-04. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse signature verification. This is associated with the ECDSA signature algorithm on the Java Card J-SAFE3…