CVE-2024-11166

Jan. 22, 2025, 7:15 p.m.

None
No Score

Description

For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a denial-of-service condition.

Product(s) Impacted

Product Versions
TCAS II system
  • ['before RTCA DO-181F']

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-15
External Control of System or Configuration Setting
One or more system settings or configuration elements can be externally controlled by a user.

Timeline

Published: Jan. 22, 2025, 7:15 p.m.
Last Modified: Jan. 22, 2025, 7:15 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

ics-cert@hq.dhs.gov

*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.