CVE-2021-29415

The elliptic curve cryptography (ECC) hardware accelerator, part of the ARM® TrustZone® CryptoCell 310, contained in the NordicSemiconductor nRF52840 through 2021-03-29 has a non-constant time ECDSA implemenation. This allows an adversary to recover the private ECC key used during an ECDSA operation.

• CWE-203

• https://eprint.iacr.org/2021/640Third Party Advisory
• https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.htmlThird Party Advisory
• https://www.sit.fraunhofer.de/en/news-events/downloads-services/cve/Not Applicable
• https://eprint.iacr.org/2021/640Third Party Advisory
• https://www.aisec.fraunhofer.de/de/das-institut/wissenschaftliche-exzellenz/security-and-trust-in-open-source-security-tokens.htmlThird Party Advisory
• https://www.sit.fraunhofer.de/en/news-events/downloads-services/cve/Not Applicable

Published

May 21, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29396Systemic Insecure Permissions in Northstar Technologies Inc …9.8
• CVE-2021-29397Cleartext Transmission of Sensitive Information in /northsta…7.5
• CVE-2021-29398Directory traversal in /northstar/Common/NorthFileManager/fi…5.3
• CVE-2021-29399XMB is vulnerable to cross-site scripting (XSS) due to inade…6.1
• CVE-2021-29400A cross-site request forgery (CSRF) vulnerability in the My …6.5
• CVE-2021-29414STMicroelectronics STM32L4 devices through 2021-03-29 have i…6.1
• CVE-2021-29416An issue was discovered in PortSwigger Burp Suite before 202…6.5
• CVE-2021-29417gitjacker before 0.1.0 allows remote attackers to execute ar…9.8
• CVE-2021-29418The netmask package before 2.0.1 for Node.js mishandles cert…5.3
• CVE-2021-29421models/metadata.py in the pikepdf package 1.3.0 through 2.9.…7.5
• CVE-2021-29424The Net::Netmask module before 2.0000 for Perl does not prop…7.5
• CVE-2021-29425In Apache Commons IO before 2.7, When invoking the method Fi…4.8