← Back to Feed
CPDLC over ATN-B1 Vulnerabilities
CVE-2025-71409CVE-2025-71410CVE-2025-71411CVE-2025-71412CVE-2025-71413
August 7, 2026 · CISA (US-CERT) · Severity: CRITICAL
This advisory describes vulnerabilities in CPDLC over ATN-B1, caused by legacy unauthenticated radio frequency links. Attackers could inject messages, cause denial of service, or force session resets, degrading operational safety margins. No remediation exists, and exploitation is considered unlikely outside a lab.
Key Takeaways
- ATN-B1 CPDLC uses legacy clear text unauthenticated radio links, allowing message injection and session resets.
- Five CVEs affect all ATN-B1 CPDLC versions; no mitigation is currently available.
- Exploitation requires specific conditions but could increase pilot workload and reduce safety margins.