CVE-2025-46673CWE-913

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security…

Medium · published April 27, 2025

CVSS v3.1
4.9
EPSS
0%
Percentile
41.8
In the wild
Unconfirmed
What it is

NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS).

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00498 · 41.8th percentile
Weakness
CWE-913 · Improper Control of Dynamically-Managed Code Resources
Published
2025-04-27T00:00Z
EPSS history
Timeline
  • 27 APR 00:00Z
    NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security…
    cvelistv5