PT-2025-17970 · Nasa · Nasa Cryptolib

Antonin Boulnois · Published 2025-04-27 · Updated 2026-01-28 · CVE-2025-46673

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NASA CryptoLib versions prior to 1.3.2

Description The issue is related to NASA CryptoLib not checking whether the SA is in an operational state before use. This could possibly lead to a bypass of the Space Data Link Security protocol (SDLS).

Recommendations For versions prior to 1.3.2, update to version 1.3.2 or later to resolve the issue. As a temporary workaround, consider implementing additional checks to ensure the SA is in an operational state before use.

Exploit

Fix

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2025-46673

Affected Products

Nasa Cryptolib

References · 14

• 🔥 https://securitybynature.fr/post/hacking-cryptolib · Exploit
• https://osv.dev/vulnerability/CVE-2025-46673 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46673 · Security Note
• https://github.com/nasa/CryptoLib/compare/v1.3.1...v1.3.2 · Note
• https://github.com/nasa/CryptoLib/pull/306 · Note
• https://github.com/nasa/CryptoLib/pull/286 · Note
• https://github.com/nasa/CryptoLib/compare/v1.3.0...v1.3.1 · Note
• https://twitter.com/cybercronai/status/1916886496184865064 · Twitter Post
• https://twitter.com/CVEnew/status/1916298843911819454 · Twitter Post
• https://t.me/cvenotify/119926 · Telegram Post
• https://t.me/cvetracker/22430 · Telegram Post
• https://twitter.com/spookier444/status/2016330041810894934 · Twitter Post
• https://twitter.com/SpaceCyberSec/status/1916507841382564267 · Twitter Post
• https://t.me/cvedetector/23814 · Telegram Post