CVE-2025-46672 LOW

CVE-2025-46672

Vendor Nasa
Product CryptoLib
Weakness CWE-252
Published April 27, 2025
Last update April 29, 2025
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

What the vulnerability does

01Description

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.

Key dates

02Disclosure timeline

April 27, 2025 CVE published
April 29, 2025 Record updated