CVE-2025-71411
Received Received - Intake

Broadcast Control Frame Disconnection in Aviation Systems

Vulnerability report for CVE-2025-71411, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-07

Last updated on: 2026-08-07

Assigner: ICS-CERT

Description

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-07
Last Modified
2026-08-07
Generated
2026-08-07
AI Q&A
2026-08-07
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves broadcast control frames that can disconnect multiple aircraft at once, causing delays in clearances and overwhelming air traffic controllers. It can be exploited remotely via radio frequency.

Detection Guidance

This vulnerability involves broadcast control frames affecting aircraft systems. Detection requires specialized radio frequency monitoring equipment to analyze control frame traffic. No standard network commands apply as this is not a typical IT network issue.

Impact Analysis

This could lead to flight delays, disrupted air traffic management, and potential safety risks due to loss of communication between aircraft and controllers.

Mitigation Strategies

Implement strict access controls for broadcast control frame transmission. Use authenticated communication protocols and monitor for anomalous frame patterns. Coordinate with aviation authorities for guidance on securing air traffic control systems.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-71411. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart