CVE-2025-71410
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
The vulnerability affects the Aviation VHF Data Link protocol and allows remote termination of CPDLC sessions via malformed frames, forcing a fallback to voice communication and increasing controller workload.
Risk Assessment
The attack can disrupt pilot-controller communication, leading to delays and potentially hazardous situations in air traffic.
Recommendation
Apply patches provided by vendors of systems using this protocol and monitor the network for anomalous frames.
Original NVD description (English source)
Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio frequency.