VULNERABILITY INTELLIGENCE

CVE-2024-11166

EPSS probability0.28%
CISA KEVNot currently listed
Published2025-01-22
Last modified2026-06-17

Description

For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a denial-of-service condition.

Weakness classification

  • ics-cert@hq.dhs.gov: CWE-15

Primary references