What’s Vulnerable › Vulnerabilities

CVE-2021-3011

• Severity: medium (CVSS 4.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-01-07 · updated 2026-06-17
• Weakness: CWE-670

Description

An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access (and consequently produce a clone). This was demonstrated on the Google Titan Security Key, based on an NXP A7005a chip. Other FIDO U2F security keys are also impacted (Yubico YubiKey Neo and Feitian K9, K13, K21, and K40) as well as several NXP JavaCard smartcards (J3A081, J2A081, J3A041, J3D145_M59, J2D145_M59, J3D120_M60, J3D082_M60, J2D120_M60, J2D082_M60, J3D081_M59, J2D081_M59, J3D081_M61, J2D081_M61, J3D081_M59_DF, J3D081_M61_DF, J3E081_M64, J3E081_M66, J2E081_M64, J3E041_M66, J3E016_M66, J3E016_M64, J3E041_M64, J3E145_M64, J3E120_M65, J3E082_M65, J2E145_M64, J2E120_M65, J2E082_M65, J3E081_M64_DF, J3E081_M66_DF, J3E041_M66_DF, J3E016_M66_DF, J3E041_M64_DF, and J3E016_M64_DF).

Affected products

• Ftsafe K13: all versions
• Ftsafe K21: all versions
• Ftsafe K40: all versions
• Ftsafe K9: all versions
• Google Titan Security Key: all versions
• NXP 3A081: all versions
• NXP A7005A: all versions
• NXP J2A081: all versions
• NXP J2D081 M59: all versions
• NXP J2D081 M61: all versions
• NXP J2D082 M60: all versions
• NXP J2D120 M60: all versions
• NXP J2D145 M59: all versions
• NXP J2E081 M64: all versions
• NXP J2E082 M65: all versions
• NXP J2E120 M65: all versions
• NXP J2E145 M64: all versions
• NXP J3A041: all versions
• NXP J3D081 M59: all versions
• NXP J3D081 M59 Df: all versions
• NXP J3D081 M61: all versions
• NXP J3D081 M61 Df: all versions
• NXP J3D082 M60: all versions
• NXP J3D120 M60: all versions
• NXP J3D145 M59: all versions
• NXP J3E016 M64: all versions
• NXP J3E016 M64 Df: all versions
• NXP J3E016 M66: all versions
• NXP J3E016 M66 Df: all versions
• NXP J3E041 M64: all versions

References

• https://ninjalab.io/a-side-journey-to-titan/
• https://ninjalab.io/wp-content/uploads/2021/01/a_side_journey_to_titan.pdf
• https://ninjalab.io/a-side-journey-to-titan/
• https://ninjalab.io/wp-content/uploads/2021/01/a_side_journey_to_titan.pdf

Get alerted when CVE-2021-3011 or the next vulnerability affects your stack