This vulnerability (CVE-2025-71411) affects the ATN-B1 CPDLC system, allowing an attacker to remotely send broadcast control frames over radio frequency that disconnect multiple aircraft simultaneously. This results in operational disruption by delaying clearances and causing overload for air traffic controllers. The underlying weakness is classified as CWE-770, indicating improper management of resource allocation leading to potential denial of service conditions. The CVSS 4.0 base score is 6.0 (medium severity), with network attack vector, high attack complexity, and low privileges required. No known exploits in the wild or vendor patches have been reported as of the publication date.

Successful exploitation can disrupt air traffic control communications by disconnecting multiple aircraft at once, leading to delayed clearances and increased workload for controllers. This could degrade the efficiency and safety of air traffic management but does not indicate direct compromise of aircraft systems or data integrity.

No official fix or patch is currently available for this vulnerability. Organizations should monitor vendor advisories for updates. Given the attack complexity is high and privileges low, implementing radio frequency monitoring and anomaly detection may help identify potential exploitation attempts. No vendor advisory indicating 'no action required' or existing mitigation is present.