CVE-2025-71413
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A vulnerability in the Aviation Very High Frequency Link Control X.25 layers involves malformed or out-of-sequence frames causing repeated resets, which may increase workload and reduce situational awareness. This attack can be carried out remotely over radio frequency.
Risk Assessment
The risk is disruption of aviation communication, potentially leading to air traffic controller overload and delayed clearances.
Recommendation
Implement mechanisms to detect and discard malformed frames and monitor traffic in the X.25 layers.
Original NVD description (English source)
Malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers cause repeated resets which may result in increased workload and reduced situational awareness. This type of attack can be carried out remotely over radio frequency.