CVE-2024-9310
Traffic Alert and Collision Avoidance System (TCAS) II has a Reliance on Untrusted Inputs in a Security Decision vulnerability
- State
- Published
- Severity
- 6.0 Medium
- Published
- Jan 22, 2025
- Updated
- Feb 12, 2025
- Reserved
- Sep 27, 2024
Description
By utilizing software-defined radios and a custom low-latency processing pipeline, RF signals with spoofed location data can be transmitted to aircraft targets. This can lead to the appearance of fake aircraft on displays and potentially trigger undesired Resolution Advisories (RAs).
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.0 Medium | CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N | icscert |
Weaknesses
- CWE-807 Reliance on Untrusted Inputs in a Security Decision
Affected Products
| Product | Versions |
|---|---|
Collision Avoidance SystemsTraffic Alert and Collision Avoidance System (TCAS) II |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-01government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.