CVE-2025-71409

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description Lack of authentication for Very High Frequency Data Link (VHFDL) messages allows rogue ground stations to inject Controller-Pilot Data Link Communications (CPDLC) messages. This can result in unexpected or misleading clearances and potential pilot confusion. The attack can be executed remotely via radio frequency.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.