CVE-2024-11166: Traffic Alert And Collision Avoidance System Tcas Ii Collision Avoidance Systems

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

For TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F, an attacker can impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control (SLC) to the lowest setting and disable the Resolution Advisory (RA), leading to a denial-of-service condition.

Affected products

• Traffic Alert And Collision Avoidance System Tcas Ii Collision Avoidance Systems: version 7.1 only

Published 2025-01-22. Last modified 2026-06-17.