PT-2025-3713 · Traffic Alert Collision Avoidance System (Tcas) Ii · Collision Avoidance Systems

Alessio Merlo + 4 · Published 2025-01-22 · Updated 2025-08-18 · CVE-2024-9310

Positive Technologies (AI Summary)

CVSS v4.0

6.0

Medium

Base vector

AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description The issue involves utilizing software-defined radios and a custom low-latency processing pipeline to transmit RF signals with spoofed location data to aircraft targets. This can cause the appearance of fake aircraft on displays and potentially trigger undesired Resolution Advisories (RAs).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-807

Related Identifiers

CVE-2024-9310

Affected Products

Collision Avoidance Systems

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-9310 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-25-021-01 · Note
• https://twitter.com/CVEnew/status/1882137382184685667 · Twitter Post
• https://twitter.com/grok/status/1957476619645514168 · Twitter Post
• https://t.me/cvedetector/16138 · Telegram Post
• https://twitter.com/midwestneil/status/1948753071158559029 · Twitter Post