Contact Contact Us

Internet-Facing Aircraft Analysis Tool Expose Airlines To Potential Attacks

Researchers found that more than 30 systems used by airlines to analyse data from airplane sensors were available online and could be used to pivot into datacentre systems and servers vulnerable to legacy security issues. The exposed systems were connected to the internet-facing AirFASE software, a flight data analysis software developed by Airbus and Teledyne Controls to interpret information from sensors on an aircraft and help determine operational issues and risks. Researchers observed multiple security issues with the AirFASE web panel that could allow an attacker to mount an attack and breach a targeted system. For instance, the web panel accepts sensitive traffic over HTTP, thereby allowing an attacker to intercept credentials when operators are logged on.

[1] Aircraft Analysis Tool Facing the Internet Exposes Airlines to Risks

Ensign InfoSecurity Singapore
30A Kallang Place
Singapore 339213

Tel: +65 6788 2882
Fax: +65 6788 3883