CVE-2025-71411

Deferred Deferred - Pending Action

BaseFortify

Publication date: 2026-08-07

Last updated on: 2026-09-29

Assigner: ICS-CERT

Description

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-07

Last Modified

2026-09-29

Generated

2026-10-07

AI Q&A

2026-08-07

EPSS Evaluated

2026-10-06

NVD

CVE-2025-71411

EUVD

EUVD-2025-210652

Affected Vendors & Products

Vendor	Product	Version / Range
ATN-B1	CPDLC	All versions

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This vulnerability involves broadcast control frames that can disconnect multiple aircraft at once, causing delays in clearances and overwhelming air traffic controllers. It can be exploited remotely via radio frequency.

Detection Guidance

This vulnerability involves broadcast control frames affecting aircraft systems. Detection requires specialized radio frequency monitoring equipment to analyze control frame traffic. No standard network commands apply as this is not a typical IT network issue.

Impact Analysis

This could lead to flight delays, disrupted air traffic management, and potential safety risks due to loss of communication between aircraft and controllers.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to aviation safety and air traffic control systems rather than data privacy or healthcare operations.

Mitigation Strategies

Implement strict access controls for broadcast control frame transmission. Use authenticated communication protocols and monitor for anomalous frame patterns. Coordinate with aviation authorities for guidance on securing air traffic control systems.

Hi! I’m here to help you understand CVE-2025-71411. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70