CVE-2025-71410

MEDIUM CVSS 4.0: 6.0 EPSS 0.20%
Updated Aug 11, 2026
Atn-B1
Parameter Value
CVSS 6.0 (MEDIUM)
Type CWE-770 (Allocation Without Limits)
Vendor Atn-B1
Public PoC No

Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames can terminate sessions and lead to a loss of CPDLC functions requiring a reversion to voice communication and increased controller workload. This type of attack can be carried out remotely over radio frequency.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Attack Requirements
None
No additional conditions
Privileges Required
Low
Basic privileges needed
User Interaction
None
No user interaction needed

Impact Assessment

Confidentiality
None
No data leak
Integrity
None
No data modification
Availability
High
Complete denial of service

CVSS Vector v4.0

Vulnerable Products

atn-b1:cpdlc