CVE-2025-46673

{"id": "CVE-2025-46673", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "cve@mitre.org", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 1.8}]}, "published": "2025-04-27T01:15:44.477", "references": [{"url": "https://github.com/nasa/CryptoLib/compare/v1.3.0...v1.3.1", "source": "cve@mitre.org"}, {"url": "https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2", "source": "cve@mitre.org"}, {"url": "https://github.com/nasa/CryptoLib/pull/286", "source": "cve@mitre.org"}, {"url": "https://github.com/nasa/CryptoLib/pull/306", "source": "cve@mitre.org"}, {"url": "https://securitybynature.fr/post/hacking-cryptolib/", "source": "cve@mitre.org"}, {"url": "https://securitybynature.fr/post/hacking-cryptolib/", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "cve@mitre.org", "description": [{"lang": "en", "value": "CWE-913"}]}], "descriptions": [{"lang": "en", "value": "NASA CryptoLib before 1.3.2 does not check whether the SA is in an operational state before use, possibly leading to a bypass of the Space Data Link Security protocol (SDLS)."}, {"lang": "es", "value": "La NASA CryptoLib anterior a la versi\u00f3n 1.3.2 no verifica si el SA est\u00e1 en estado operativo antes de su uso, lo que posiblemente provoque una evasi\u00f3n del protocolo de seguridad de enlace de datos espaciales (SDLS)."}], "lastModified": "2025-04-29T16:15:37.900", "sourceIdentifier": "cve@mitre.org"}