Security Advisory

CVE-2024-11166

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-01-22 18:40:30
Last updated 2025-02-12 17:08:00
Assigner icscert
State PUBLISHED

Description

For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a denial-of-service condition.