CVE-2024-9310CWE-807

Traffic Alert and Collision Avoidance System (TCAS) II has a Reliance on Untrusted Inputs in a Security Decision vulnerability

Medium · published January 22, 2025

CVSS v4.0
6.0
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

By utilizing software-defined radios and a custom low-latency processing pipeline, RF signals with spoofed location data can be transmitted to aircraft targets. This can lead to the appearance of fake aircraft on displays and potentially trigger undesired Resolution Advisories (RAs).

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00229 · 12.9th percentile
Weakness
CWE-807 · Reliance on Untrusted Inputs in a Security Decision
Published
2025-01-22T18:41Z
EPSS history
Timeline
  • 22 JAN 18:41Z
    Traffic Alert and Collision Avoidance System (TCAS) II has a Reliance on Untrusted Inputs in a Security Decision vulnerability
    cvelistv5