CVE-2025-71409: falha de alta gravidade em ATN-B1 CPDLC
No Authentication for Very High Frequency Data Link messages used in CPDLC
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.3%
Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L
Produtos afetados
ATN-B1 · CPDLCCVEs relacionadas — ATN-B1 CPDLC
No mesmo produto, das mais perigosas para as menos.
CVE-2025-71410MEDIUMMalicious Link Control Frames Can Cause Loss of CPDLC FunctionsEPSS 0.3%CVE-2025-71411MEDIUMIn CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft SimultaneouslyEPSS 0.3%CVE-2025-71413MEDIUMIn CPDLC, Malformed or Out of Sequence Frames Can Cause ResetsEPSS 0.3%CVE-2025-71412HIGHIn CPDLC, False Emergency or Status Messages Will be Accepted as LegitimateEPSS 0.3%