[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feXjUs8zrN3fHEsaqUwIm0PatAbN8PFeJP4eQfG4Uhro":3,"g5a-risk:CVE-2021-43393":137},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":42,"affectedProducts":43,"affectedProductsCount":60,"references":61,"referencesCount":72,"weaknesses":73,"weaknessesCount":82,"isActivelyExploited":83,"cisaInfo":27,"otxData":27,"relatedBlogPosts":84,"seoMetadata":85,"configurations":110,"relatedVendorCves":133,"notableEvents":134},"CVE-2021-43393","What is CVE-2021-43393?","STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse signature verification. This is associated with the ECDSA signature algorithm on the Java Card J-SAFE3 and STSAFE-J platforms exposing a 3.0.4 Java Card API. It is exploitable for STSAFE-J in closed configuration and J-SIGN (when signature verification is activated) but not for J-SAFE3 EPASS BAC and EAC products. It might also impact other products based on the J-SAFE-3 Java Card platform.","STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to abuse signature verification. This is associated with the ECDSA sig...","2022-03-04T13:15:08.24","2022-03-10T15:05:00.993",6.2,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":30,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":25,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,2.5,3.6,[31],{"Source":17,"Type":18,"CVSSData":32,"BaseSeverity":22,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":27,"ObtainAllPrivilege":27,"ObtainUserPrivilege":27,"ObtainOtherPrivilege":27,"UserInteractionRequired":27},{"Version":33,"VectorString":34,"AccessVector":21,"AccessComplexity":26,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":35,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":27,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:L\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",1.9,3.4,2.9,0.00152,[41,41,39,39,39,39,39],0.0015,"Medium",[44,49,53,57],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"st","stsafe-j_firmware","1.1.4","cpe:2.3:o:st:stsafe-j_firmware:1.1.4:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"stsafe-j","-","cpe:2.3:h:st:stsafe-j:-:*:*:*:*:*:*:*",{"vendor":45,"product":54,"version":55,"criteria":56,"vulnerable":4},"j-safe3_firmware","1.2.5","cpe:2.3:o:st:j-safe3_firmware:1.2.5:*:*:*:*:*:*:*",{"vendor":45,"product":58,"version":51,"criteria":59,"vulnerable":4},"j-safe3","cpe:2.3:h:st:j-safe3:-:*:*:*:*:*:*:*",4,[62,67],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fcommunity.st.com\u002Fs\u002Ftoparticles","St",[66],"Vendor Advisory",{"url":68,"source":69,"tags":70},"https:\u002F\u002Fwww.cert.ssi.gouv.fr\u002Favis\u002FCERTFR-2022-AVI-169\u002F","Gouv",[71],"Third Party Advisory",2,[74],{"id":75,"name":76,"description":77,"extendedDescription":78,"status":79,"abstraction":80,"structure":81},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",1,false,[],{"title":86,"metaDescription":87,"keywords":88,"canonicalUrl":89,"structuredData":90},"What is CVE-2021-43393? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-43393, a medium severity cyber security vulnerability from 2022. STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-S...","CVE-2021-43393, CVE-2021-43393 vulnerability, CVE-2021-43393 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, st security, stsafe-j_firmware vulnerability, stsafe-j vulnerability, j-safe3_firmware vulnerability, j-safe3 vulnerability","\u002Fwhat-is\u002Fcve-2021-43393",{"@context":91,"@type":92,"headline":86,"description":87,"datePublished":10,"dateModified":11,"author":93,"publisher":97,"about":101,"mainEntityOfPage":105,"articleSection":108,"keywords":109},"https:\u002F\u002Fschema.org","TechArticle",{"@type":94,"name":95,"url":96},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":94,"name":95,"url":96,"logo":98},{"@type":99,"url":100},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":102,"name":6,"description":103,"additionalType":104},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":106,"@id":107},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-43393","Cybersecurity","CVE-2021-43393, CVE-2021-43393 vulnerability, CVE-2021-43393 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[111,123],{"Operator":112,"Negate":27,"Nodes":113},"AND",[114,119],{"Operator":115,"Negate":27,"CPEMatch":116},"OR",[117],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":118,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BC8F50AF-97F7-47B1-BDE2-AC15446F1768",{"Operator":115,"Negate":27,"CPEMatch":120},[121],{"Vulnerable":27,"Criteria":52,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80AB60B5-F0C0-46A8-B05A-0C11F35EE49E",{"Operator":112,"Negate":27,"Nodes":124},[125,129],{"Operator":115,"Negate":27,"CPEMatch":126},[127],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":128,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"BC735EDA-3D15-4623-A29E-0D717D35E9BF",{"Operator":115,"Negate":27,"CPEMatch":130},[131],{"Vulnerable":27,"Criteria":59,"MatchCriteriaID":132,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"7C03B714-DC65-404C-8052-86E9CE1BE561",[],[],{"lastModified":11,"cacheTime":136,"version":33},1792364897521,{"score":138,"band":139,"action":140,"scoredAt":141},20,"Low","Monitor","2026-10-16T06:53:44.342306+00:00"]