Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
STMicroelectronics STSAFE-J 1.1.4, J-SAFE3 1.2.5, and J-SIGN sometimes allow attackers to obtain information on cryptographic secrets. This is associated with the ECDSA signature algorithm on the Java Card J-SAFE3 and STSAFE-J platforms exposing a 3.0.4 Java Card API. It is exploitable for STSAFE-J in closed configuration and J-SIGN (when signature verification is activated) but not for J-SAFE3 EPASS BAC and EAC products. It might also impact other products based on the J-SAFE-3 Java Card platform.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
STMicroelectronics STSAFE-J 数据伪造问题漏洞
Vulnerability Description
STMicroelectronics STSAFE-J是瑞士STMicroelectronics公司的一个高度安全的解决方案。通过向本地或远程主机提供身份验证、数据管理和加密服务来充当安全元素。 STMicroelectronics STSAFE-J 中存在数据伪造问题漏洞，该漏洞源于产品使用的Java Card API ECDSA算法存在漏洞。攻击者可通过该漏洞获得密码信息。以下产品及版本受到影响：STSAFE-J 1.1.4 版本和J-SAFE3 1.2.5 版本。
CVSS Information
N/A
Vulnerability Type
N/A