Skip to content
OpenAdvisories
High ICSA-25-191-10 1 CVE

End-of-Train and Head-of-Train Remote Linking Protocol (Update C)

Published Jul 10, 2025 · Updated Sep 18, 2025 · Revision 4

Vendor: Association of American Railroads (AAR) Vendor: DPS Electronics Vendor: Siemens Vendor: Wabtec Product: DPS 2020-He Product: DPS 2020-He-LD Product: DPS 3030-CM-MAG Product: DPS 3030-I-MAG HTD Product: End-of-Train and Head-of-Train remote linking protocol Product: Trainguard EOT Product: Trainguard HOT Product: TrainLink NG End of Train (NGEOT) Product: TrainLink NG3 ATX End of Train (NG3 EOT) Product: TrainLink NG4 ATX End of Train (NG4 EOT) Product: TrainLink NG5 ATX End of Train (NG5 EOT)

Summary

Successful exploitation of this vulnerability could allow an attacker to send their own brake control commands to the end-of-train device, causing a sudden stoppage of the train which may lead to a disruption of operations, or induce brake failure.

Vulnerabilities 1

Revision history

  1. #4

    Update C- Expanded affected device list with Siemens and DPS Electronics products

  2. #3

    Update B- Added affected device list and cybersecurity page for Wabtec products, added DPS Electronics as an affected vendor

  3. #2

    Update A- Removed Hitachi from list of affected vendors, adjusted formatting

  4. #1

    Initial Publication

References