Remote Attack on Aircraft Communication Systems by Vendor XYZ
CVE-2025-71411

6MEDIUM

Key Information:

Vendor

Atn-b1

Status
Cpdlc
Vendor
CVE Published:
7 August 2026

What is CVE-2025-71411?

A vulnerability in the aircraft communication systems allows for remote broadcast control frame attacks, potentially disconnecting multiple aircraft simultaneously. This can result in operational delays and increased workload on air traffic controllers, leading to significant safety concerns in aviation operations. The attack leverages existing radio frequency communications to interfere with system functions, highlighting the need for robust security measures in aerospace technology.

Affected Version(s)

CPDLC All versions

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-2...
third-party-advisory

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martin Strohmeier of Armasuisse reported this vulnerability to CISA.
.