CVE-2025-71412: falha de alta gravidade em ATN-B1 CPDLC
In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.1epss 0.3%
Injection of false emergency or status messages over CPDLC may lead to misallocation of resources, operational confusion, and improper response actions by flight crews, traffic controllers, and ground operations. This type of attack can be carried out remotely over radio frequency.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L
Produtos afetados
ATN-B1 · CPDLCCVEs relacionadas — ATN-B1 CPDLC
No mesmo produto, das mais perigosas para as menos.
CVE-2025-71409HIGHNo Authentication for Very High Frequency Data Link messages used in CPDLCEPSS 0.3%CVE-2025-71410MEDIUMMalicious Link Control Frames Can Cause Loss of CPDLC FunctionsEPSS 0.3%CVE-2025-71411MEDIUMIn CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft SimultaneouslyEPSS 0.3%CVE-2025-71413MEDIUMIn CPDLC, Malformed or Out of Sequence Frames Can Cause ResetsEPSS 0.3%