Back to Database
Status published
Medium
CVE-2025-46673
NASA CryptoLib before 1.3.2 does not check whether the SA...
Vulnerability Description
NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-46673
Credits & Attribution
No credits recorded in the NVD database.
References
More from NASA
View All →CVE-2025-46675
In NASA CryptoLib before 1.3.2, the key state is not...
Low
3.5
CVE-2025-46674
NASA CryptoLib before 1.3.2 uses Extended Procedures that are a...
Low
3.5
CVE-2025-46672
NASA CryptoLib before 1.3.2 does not check the OTAR crypto...
Low
3.5
CVE-2019-1010060
NASA CFITSIO prior to 3.43 is affected by: Buffer Overflow....
Critical
9.8
CVE-2018-3847
Multiple exploitable buffer overflow vulnerabilities exist in image parsing functionality...
High
8.8
Affected Vendor
NASA
View all reports →Affected Software
CryptoLib
Vulnerable Versions:
0
Timeline
Official Publish:
April 27th, 2025
Last Modified:
April 29th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.