This vulnerability (CVE-2025-71410) involves the ATN-B1 CPDLC system being susceptible to session termination through unnumbered disconnect (U DISC) and malformed Aviation Very High Frequency Link Control frames. Exploitation results in loss of CPDLC functionality, requiring reversion to voice communication. The attack vector is remote via radio frequency. The CVSS 4.0 base score is 6.0, indicating medium severity, with network attack vector, high attack complexity, low privileges required, no user interaction, and high impact on availability. No patch or official remediation is currently documented, and no known exploits are reported in the wild.

Successful exploitation causes termination of CPDLC sessions, resulting in loss of data link communication capabilities. This forces air traffic controllers and pilots to revert to voice communication, increasing controller workload and potentially impacting operational efficiency and safety. There is no indication of confidentiality or integrity impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, operators should be aware of the risk of session termination via malformed frames and consider operational procedures to mitigate increased controller workload. No official fix or temporary workaround has been documented.