CVE-2025-71410 — Malicious Link Control Frames Can Cause Loss of CPDLC Functions

CVE-2025-71410

Malicious Link Control Frames Can Cause Loss of CPDLC Functions PUBLISHED

Description (CNA)

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio frequency.

Affected (CNA)

Vendor / product	Versions
ATN-B1 / CPDLC	affected All versions

CWE

CWE-770

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-219-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.