QwikSec

Security Database

CVE

CWE

Training

CVE-2024-11166

Published: Jan 22, 2025

Modified: Feb 12, 2025

PUBLISHED

Description

For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a denial-of-service condition.

Vendor	Product	Versions
Traffic Alert and Collision Avoidance System (TCAS) II	Collision Avoidance Systems	affected `7.1`

Weaknesses (CWE)

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-021-01

government-resource

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.