These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A vulnerability in ATN-B1's CPDLC system can cause increased workload and reduced situational awareness due to repeated resets from malformed or out-of-sequence frames at the Aviation Very High Frequency Link Control X.25 layers. This type of attack can be carried out remotely over radio frequency. The vulnerability affects ATN-B1's CPDLC system, which is used in aviation systems. Defenders and security t [truncated]
CVE-2025-71412 involves injection of false emergency or status messages over CPDLC, potentially leading to resource misallocation, operational confusion, and improper response actions. This issue is significant for aviation security, particularly for flight crews, traffic controllers, and ground operations. The vulnerability has a CVSS score of 7.1 and is considered high severity.
PatchSiren debrief for CVE-2025-71411: This vulnerability in ATN-B1 CPDLC allows remote disconnection of multiple aircraft via broadcast control frames, potentially leading to delayed clearances and air traffic controller overload. The attack can be carried out remotely over radio frequency. Air traffic control systems administrators should assess exposure and prioritize verification of affected versions [truncated]
PatchSiren debrief for CVE-2025-71410: Unnumbered Disconnect and malformed Aviation Very High Frequency Link Control frames can terminate CPDLC sessions, leading to loss of function and increased controller workload. This vulnerability affects aviation and air traffic control systems, particularly those managing radio frequency communication systems and CPDLC functions. The vulnerability has a medium seve [truncated]
PatchSiren debrief for CVE-2025-71409: The CPDLC system lacks authentication for Very High Frequency Data Link messages, allowing rogue ground stations to inject CPDLC messages leading to unexpected or misleading clearances and potential pilot confusion. This vulnerability can be exploited remotely over radio frequency, posing a significant risk to aviation communication systems. Defenders should assess e [truncated]