As cited
Copy frozen at (site build).
vulnerabilities
CPDLC over ATN-B1 Vulnerabilities
Research has identified five vulnerabilities in Controller Pilot Data Link Communications (CPDLC) over Aeronautical Telecommunication Network B1 (ATN-B1) that exploit legacy unauthenticated radio frequency links. These flaws permit unauthorized message injection, denial-of-service attacks, and session resets, degrading operational safety margins by increasing pilot workload and delaying safety-critical instructions. No mitigations are currently available, though CISA notes these vulnerabilities require specific conditions and have not been publicly exploited.
Why it matters: Aviation operators and air traffic control authorities managing aircraft using CPDLC over ATN-B1 must recognize these vulnerabilities in global air transportation infrastructure and prepare incident response procedures, as active exploitation could force reliance on voice communication and reduce situational awareness during critical operations.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
vulnerabilities
CPDLC over ATN-B1 Vulnerabilities
Research has identified five vulnerabilities in Controller Pilot Data Link Communications (CPDLC) over Aeronautical Telecommunication Network B1 (ATN-B1) that exploit legacy unauthenticated radio frequency links. These flaws permit unauthorized message injection, denial-of-service attacks, and session resets, degrading operational safety margins by increasing pilot workload and delaying safety-critical instructions. No mitigations are currently available, though CISA notes these vulnerabilities require specific conditions and have not been publicly exploited.
Why it matters: Aviation operators and air traffic control authorities managing aircraft using CPDLC over ATN-B1 must recognize these vulnerabilities in global air transportation infrastructure and prepare incident response procedures, as active exploitation could force reliance on voice communication and reduce situational awareness during critical operations.
- Source published
- First seen by Cybersecurity Tracker