threat-intel
CPDLC over ATN-B1 Vulnerabilities
High
Summary
A CISA advisory highlights vulnerabilities in the CPDLC over ATN-B1 protocol, which relies on legacy, unauthenticated radio frequency links. These vulnerabilities allow for message injection, denial-of-service conditions, and forced session resets, potentially leading to operational safety degradation and increased workload for air traffic controllers. Currently, there are no available mitigations, and public exploitation is not known, but the protocol is exploitable in a lab setting due to its high attack complexity.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data