CVE-2024-9310— Traffic Alert and Collision Avoidance System (TCAS) II has a Reliance on Untrusted Inputs in a Security Decision vulnerability
Quick assessment
Affected
Traffic Alert and Collision Avoidance System (TCAS) II Collision Avoidance Systems
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Federal Aviation Administration TCAS是美国美国联邦航空管理局（Federal Aviation Administration）组织的一个交通警报和防撞系统。 Federal Aviation Administration TCAS 7.1及之前版本存在安全漏洞，该漏洞源于安全决策中存在依赖不受信任的输入，导致显示器上出现假飞机，并可能触发不需要的分辨率公告。
Possible ATT&CK Techniques 2 AI
T1203 · Exploitation for Client Execution T1589 · Gather Victim Identity Information
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-9310
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Traffic Alert and Collision Avoidance System (TCAS) II has a Reliance on Untrusted Inputs in a Security Decision vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
By utilizing software-defined radios and a custom low-latency processing pipeline, RF signals with spoofed location data can be transmitted to aircraft targets. This can lead to the appearance of fake aircraft on displays and potentially trigger undesired Resolution Advisories (RAs).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
在安全决策中依赖未经信任的输入
Source: CVE Program / CVE List V5
Vulnerability Title
Federal Aviation Administration TCAS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Federal Aviation Administration TCAS是美国美国联邦航空管理局（Federal Aviation Administration）组织的一个交通警报和防撞系统。 Federal Aviation Administration TCAS 7.1及之前版本存在安全漏洞，该漏洞源于安全决策中存在依赖不受信任的输入，导致显示器上出现假飞机，并可能触发不需要的分辨率公告。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Traffic Alert and Collision Avoidance System (TCAS) II | Collision Avoidance Systems | 7.1 | - |
|
II. Public POCs for CVE-2024-9310
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-9310
请登录查看更多情报信息。
Vendor Advisories for CVE-2024-9310 (1)
-
Traffic Alert and Collision Avoidance System (TCAS) II | CISA government-resource
IV. Related Vulnerabilities
Same weakness: CWE-807
-
CVE-2026-104658
Reliance on Untrusted Inputs in a Security Decision in hMail -
CVE-2026-103923
KaTeX: Existing prototype pollution can bypass trust restric -
CVE-2026-103267
Ghost 0.5.0 before 6.62.0 Arbitrary Email Registration via S -
CVE-2026-102117
Kiteworks Core Remote Code Execution -
CVE-2026-101131
deepseek-ai deepseek-harness dsh index.ts reliance on untrus
V. Comments for CVE-2024-9310
No comments yet