CVE-2025-46672CWE-252

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking

Low · published April 27, 2025

CVSS v3.1
3.5
EPSS
1%
Percentile
43.9
In the wild
Unconfirmed
What it is

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00529 · 43.9th percentile
Weakness
CWE-252 · Unchecked Return Value
Published
2025-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking
    cvelistv5