Swiss Aviation Authority Identifies Critical Vulnerabilities in Collision Warning Systems

In a groundbreaking investigation, Switzerland's Cyber-Defence Campus has uncovered significant security vulnerabilities in the Traffic Alert and Collision Avoidance System (TCAS II), a critical safety component mandatory for civil aviation. The research team, operating under the Federal Office of Armaments (Armasuisse), successfully demonstrated how these security gaps could be exploited to generate false warnings in aircraft cockpits, raising serious concerns about aviation safety.

The research team identified two distinct vulnerabilities in the TCAS II system, using a certified processor and custom radio setup. TCAS II serves as the last line of defense against mid-air collisions for civil aircraft weighing 5.7 tonnes or more. The demonstration of false warning triggers highlights the potential for malicious actors to compromise this critical safety system. Most concerning is the current absence of technical countermeasures, as confirmed by aviation authorities.

The discoveries have prompted immediate attention from international aviation authorities. The US Cyber Defense Agency (CISA) and Federal Aviation Authority (FAA) have formally classified these vulnerabilities, rating them as moderate to severe. This assessment is expected to influence aviation safety protocols across Europe and beyond, highlighting Switzerland's crucial role in identifying and addressing global aviation security challenges.

The implications of these findings are particularly significant given that TCAS serves as the final safeguard against aircraft collisions. With no immediate technical solutions available, aviation authorities and manufacturers must work quickly to develop countermeasures. The Swiss discovery underscores the critical importance of cybersecurity in aviation safety systems and highlights the need for continuous security assessments of vital aviation infrastructure.