CVE-2025-46673 MEDIUM

CVE-2025-46673

Vendor Nasa

Product CryptoLib

Weakness CWE-913

Published April 27, 2025

Last update April 29, 2025

View on NVD All CVEs

CVSS base score

4.9/10

Attack vector Network

Attack complexity High

Privileges required Low

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).

Key dates

02Disclosure timeline

April 27, 2025 CVE published

April 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-46673 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/913.html

Related vulnerabilities

04Related CVE

CVE-2021-23267 Improper Control of Dynamically-Managed Code Resources in Crafter Studio CVE-2019-1595 Cisco Nexus 5600 and 6000 Series Switches Fibre Channel over Ethernet Denial of Service Vulnerability CVE-2022-3225 Improper Control of Dynamically-Managed Code Resources in budibase/budibase CVE-2026-33286 Graphiti Affected by Arbitrary Method Execution via Unvalidated Relationship Names CVE-2021-23258 Spring SPEL Expression Language Injection