Skip to content
OpenAdvisories
High ICSA-25-021-01 2 CVEs

Traffic Alert and Collision Avoidance System (TCAS) II

Published Jan 21, 2024 · Updated Jan 21, 2024

Summary

Successful exploitation of these vulnerabilities could allow an attacker to manipulate safety systems and cause a denial-of-service condition.

Vulnerabilities 2

  • High 7.1
    CVE-2024-11166

    Traffic Alert and Collision Avoidance System (TCAS) II has an External Control of System or Configuration Setting vulnerability

    For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable t…

    Traffic Alert and Collision Avoidance System (TCAS) II Collision Avoidance Systems
  • Medium 6.0
    CVE-2024-9310

    Traffic Alert and Collision Avoidance System (TCAS) II has a Reliance on Untrusted Inputs in a Security Decision vulnerability

    By utilizing software-defined radios and a custom low-latency processing pipeline, RF signals with spoofed location data can be transmitted to aircraft targets. This can lead to the appearance of fake aircraft on displays and potentially trigger undesired Res…

    Traffic Alert and Collision Avoidance System (TCAS) II Collision Avoidance Systems

Revision history

  1. #1

    Initial Publication

References