CVE Catalog

CVE-2025-71411

MediumCVSS 5.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.20%

10th percentile - higher than 10% of all known CVEs

Summary

A vulnerability involves broadcast control frames that can disconnect multiple aircraft simultaneously, leading to delayed clearances and air traffic controller overload. This attack can be carried out remotely over radio frequency.

Risk Assessment

The risk is mass disconnection of aircraft, disrupting air traffic and increasing controller workload, potentially leading to hazardous situations.

Recommendation

Implement protections against unauthorized broadcast frames and monitor communication integrity.

Original NVD description (English source)

Broadcast control frames can disconnect multiple aircraft simultaneously leading to delayed clearances and air traffic controller overload. This type of attack can be carried out remotely over radio frequency.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS