This vulnerability (CVE-2025-71411) affects the ATN-B1 CPDLC communication system used in aviation. An attacker can remotely send broadcast control frames over radio frequency to disconnect multiple aircraft at once, leading to operational disruptions such as delayed clearances and increased workload for air traffic controllers. The underlying issue is a race condition or improper management of shared resources (CWE-770). The CVSS 4.0 base score is 6.0, indicating medium severity, with network attack vector, high attack complexity, and low privileges required. No known exploits are reported in the wild, and no vendor remediation or patch information is currently available.

Successful exploitation can cause simultaneous disconnection of multiple aircraft from the CPDLC system, resulting in delayed air traffic clearances and increased workload for air traffic controllers. This can degrade the efficiency and safety of air traffic management operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, operators should monitor communications and consider additional procedural mitigations to handle potential disconnections. No official fix or temporary workaround is currently documented.