Vulnerabilities CVE-2025-71409

CVE-2025-71409

High

Open

TLP:CLEAR

No Authentication for Very High Frequency Data Link messages used in CPDLC

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Lack of authentication for Very High Frequency Data Link messages allows rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This type of attack can be carried out remotely over radio frequency.

Details

CVSS Score: 7.1
EPSS Score ⓘ: 0.20%

10.1th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L
Confidence: 90%
Published: Aug 7, 2026
Last Modified: Aug 10, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.