CVE-2024-11166 Misconfiguration in Collision Avoidance Systems
Attackers can disable collision avoidance advisories by impersonating ground stations, causing denial of service in aviation systems.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-11166?
CVE-2024-11166 is a high-severity vulnerability in Traffic Alert and Collision Avoidance System (TCAS) II Collision Avoidance Systems, published on 22 Jan 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a denial-of-service condition.
Weakness: CWE-15
Which versions are affected by CVE-2024-11166?
How do I fix CVE-2024-11166?
No fix has been published for CVE-2024-11166 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-11166 being exploited?
There is no known exploitation of CVE-2024-11166 in the wild and no public exploit code.
Sources
Also known as GHSA-7wv2-2269-6gj4.