CVE-2025-71413: medium-severity vulnerability in ATN-B1 CPDLC
In CPDLC, Malformed or Out of Sequence Frames Can Cause Resets
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6epss 0.3%
Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situational awareness. This type of attack can be carried out remotely over radio frequency.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
ATN-B1 · CPDLCRelated CVEs — ATN-B1 CPDLC
In the same product, most dangerous first.
CVE-2025-71409HIGHNo Authentication for Very High Frequency Data Link messages used in CPDLCEPSS 0.3%CVE-2025-71410MEDIUMMalicious Link Control Frames Can Cause Loss of CPDLC FunctionsEPSS 0.3%CVE-2025-71411MEDIUMIn CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft SimultaneouslyEPSS 0.3%CVE-2025-71412HIGHIn CPDLC, False Emergency or Status Messages Will be Accepted as LegitimateEPSS 0.3%