CVE-2025-46673
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Summary
CVE-2025-46673 is a vulnerability affecting NASA's CryptoLib software before version 1.3.2. This issue arises from the failure to check if the Security Associations (SA) are in an operational state prior to use, enabling an attacker to potentially bypass the Space Data Link Security (SDLS) protocol. This vulnerability could pose a significant risk to secure data transmitted through the SDLS, as unauthorized access might go undetected. NASA strongly advises users to upgrade to the latest version of CryptoLib to mitigate this vulnerability and ensure the continued security of their data transmissions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- NASA