[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3IM4-Q82kj0k2KN_LSFTfl05u9pMxjGHhIQl0_HKI68":3,"g5a-risk:CVE-2021-43392":136},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":59,"references":60,"referencesCount":71,"weaknesses":72,"weaknessesCount":81,"isActivelyExploited":82,"cisaInfo":27,"otxData":27,"relatedBlogPosts":83,"seoMetadata":84,"configurations":109,"relatedVendorCves":132,"notableEvents":133},"CVE-2021-43392","What is CVE-2021-43392?","STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptographic secrets. This is associated with the ECDSA signature algorithm on the Java Card J-SAFE3 and STSAFE-J platforms exposing a 3.0.4 Java Card API. It is exploitable for STSAFE-J in closed configuration and J-SIGN (when signature verification is activated) but not for J-SAFE3 EPASS BAC and EAC products. It might also impact other products based on the J-SAFE-3 Java Card platform.","STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptographic secrets. This is associated wit...","2022-03-04T13:15:08.193","2022-03-10T15:04:56.017",6.2,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.5,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":22,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":26,"Authentication":23,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",1.9,3.4,2.9,0.00166,[39,39,39,39,39,39,39],"Medium",[43,48,52,56],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"st","j-safe3_firmware","1.2.5","cpe:2.3:o:st:j-safe3_firmware:1.2.5:*:*:*:*:*:*:*",{"vendor":44,"product":49,"version":50,"criteria":51,"vulnerable":4},"j-safe3","-","cpe:2.3:h:st:j-safe3:-:*:*:*:*:*:*:*",{"vendor":44,"product":53,"version":54,"criteria":55,"vulnerable":4},"stsafe-j_firmware","1.1.4","cpe:2.3:o:st:stsafe-j_firmware:1.1.4:*:*:*:*:*:*:*",{"vendor":44,"product":57,"version":50,"criteria":58,"vulnerable":4},"stsafe-j","cpe:2.3:h:st:stsafe-j:-:*:*:*:*:*:*:*",4,[61,66],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fcommunity.st.com\u002Fs\u002Ftoparticles","St",[65],"Vendor Advisory",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.cert.ssi.gouv.fr\u002Favis\u002FCERTFR-2022-AVI-169\u002F","Gouv",[70],"Third Party Advisory",2,[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",1,false,[],{"title":85,"metaDescription":86,"keywords":87,"canonicalUrl":88,"structuredData":89},"What is CVE-2021-43392? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-43392, a medium severity cyber security vulnerability from 2022. STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-S...","CVE-2021-43392, CVE-2021-43392 vulnerability, CVE-2021-43392 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, st security, j-safe3_firmware vulnerability, j-safe3 vulnerability, stsafe-j_firmware vulnerability, stsafe-j vulnerability","\u002Fwhat-is\u002Fcve-2021-43392",{"@context":90,"@type":91,"headline":85,"description":86,"datePublished":10,"dateModified":11,"author":92,"publisher":96,"about":100,"mainEntityOfPage":104,"articleSection":107,"keywords":108},"https:\u002F\u002Fschema.org","TechArticle",{"@type":93,"name":94,"url":95},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":93,"name":94,"url":95,"logo":97},{"@type":98,"url":99},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":101,"name":6,"description":102,"additionalType":103},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":105,"@id":106},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-43392","Cybersecurity","CVE-2021-43392, CVE-2021-43392 vulnerability, CVE-2021-43392 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[110,122],{"Operator":111,"Negate":27,"Nodes":112},"AND",[113,118],{"Operator":114,"Negate":27,"CPEMatch":115},"OR",[116],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":117,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BC735EDA-3D15-4623-A29E-0D717D35E9BF",{"Operator":114,"Negate":27,"CPEMatch":119},[120],{"Vulnerable":27,"Criteria":51,"MatchCriteriaID":121,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7C03B714-DC65-404C-8052-86E9CE1BE561",{"Operator":111,"Negate":27,"Nodes":123},[124,128],{"Operator":114,"Negate":27,"CPEMatch":125},[126],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":127,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BC8F50AF-97F7-47B1-BDE2-AC15446F1768",{"Operator":114,"Negate":27,"CPEMatch":129},[130],{"Vulnerable":27,"Criteria":58,"MatchCriteriaID":131,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80AB60B5-F0C0-46A8-B05A-0C11F35EE49E",[],[],{"lastModified":11,"cacheTime":135,"version":33},1793222058142,{"score":137,"band":138,"action":139,"scoredAt":140},20,"Low","Monitor","2026-10-28T06:53:19.791259+00:00"]