{"id":25673,"date":"2022-08-13T11:22:19","date_gmt":"2022-08-13T05:52:19","guid":{"rendered":"https:\/\/aviationa2z.com\/?p=25673"},"modified":"2022-08-13T11:22:21","modified_gmt":"2022-08-13T05:52:21","slug":"breaking-pen-test-partners-fix-the-digital-vulnerability-on-boeing-aircraft-system-that-could-be-hacked-exclusive","status":"publish","type":"post","link":"https:\/\/aviationa2z.com\/index.php\/2022\/08\/13\/breaking-pen-test-partners-fix-the-digital-vulnerability-on-boeing-aircraft-system-that-could-be-hacked-exclusive\/","title":{"rendered":"BREAKING: Pen Test Partners fix the digital vulnerability on Boeing aircraft system that could be hacked | Exclusive"},"content":{"rendered":"\n

Las Vegas, 13 Aug,<\/strong> A Cybersecurity solution provider Pen Test Partners <\/a>have fixed the digital vulnerability on the Boeing aircraft computer system that could allow the hackers to run a malicious code, modify data and cause pilots to make dangerous miscalculations.<\/p>\n\n\n\n

The security gaps in the older version of Boeing”s Onboard performance tool<\/strong> could make it susceptible to attack by Hackers.<\/p>\n\n\n\n

Digital Vulnerability on Boeing planes that could be hacked is Fixed<\/h2>\n\n\n\n
\"Boeing-737-max\"
Boeing-737-max<\/figcaption><\/figure>\n\n\n\n

Older versions of a digital tool used to calculate landing and takeoff speeds on some aircraft<\/strong> could be tampered with by hackers with direct access to an \u201cElectronic Flight Bag<\/strong>,\u201d or EFB, a tablet device used by pilots to plan flights, Pan test partners said in a report.<\/p>\n\n\n\n

While the likelihood of exploiting such gaps is low given existing regulations governing the use and employment of EFBs and Crew Resource Management procedures. Still, if data modification occurs, and the resulting miscalculations are not detected during the crew\u2019s required cross-check or verification process, an aircraft could land on a runway too short or take off at incorrect speeds potentially resulting in a tail strike or runway excursion.<\/p>\n\n\n\n

Boeing has released a new software update and SBs to operators<\/strong> to enhance the security features. It is crucial that operators employing EFB solutions implement physical access control.<\/p>\n\n\n\n

What is OTP?<\/h2>\n\n\n\n

Onboard Performance Tool<\/strong> or OTP is used by pilots to calculate the landing and takeoff speed of certain Boeing planes.<\/p>\n\n\n\n

\"Pen
Image Credits To Pen Test Partners<\/figcaption><\/figure>\n\n\n\n

This tool is Very critical<\/strong> as it helps pilots avoid running out of runway, optimize braking, and to calculate V speeds during Takeoff.<\/p>\n\n\n\n

OPT is deployed to a pilot\u2019s electronic flight bag and receives regular updates<\/strong> to its airport database.<\/p>\n\n\n\n

Details about airfields, their runways, obstacles, and other performance calculation factors (like engine type) are stored in SQLite databases <\/strong>alongside the OPT application. Aircraft operators<\/strong> can take a feed from Boeing directly, or in some cases generate their own databases with custom software.<\/p>\n\n\n\n

OPT itself is commonly found on iPad-style devices <\/strong>but we have seen OPT in use on ruggedized Windows laptops and tablets as well.<\/p>\n\n\n\n

To learn more in-depth about the software vulnerability in Boeing planes check this post by Pen partners.<\/a><\/p>\n\n\n\n

Boeing statement over Vulnerability<\/h2>\n\n\n\n

They have thanked Pen test Partners for their solutions and stated,<\/p>\n\n\n\n

Boeing would like to thank Pen Test Partners for their research, professionalism and collaboration. we welcomes future engagement by PTP and other security researchers, and is committed to evaluating any original findings when disclosures are conducted and shared in a responsible and coordinated manner. our company encourages security researchers or others in the community who have identified security issues to utilize Boeing\u2019s VDP.<\/em><\/p>Boeing ststement<\/cite><\/blockquote>\n\n\n\n

It’s better to be safe than sorry, Boeing software updates can save millions of lives. such software glitches are addressed way before they can become a threat.<\/p>\n\n\n\n

Also Read, TATA Air India New CEO visits AirWorks facilities for the First Time | Exclusive – Aviation A2Z<\/a><\/p>\n\n\n\n

Check out, Shortage of Pilots, airline, and airport staff globally | Exclusive – Aviation A2Z<\/a><\/p>\n\n\n\n

Join Our Telegram Group<\/strong> for Latest Aviation Updates:-https:\/\/t.me\/aviationa2z<\/a><\/p>\n\n\n\n

Stay connected with Aviation A2Z!<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"

Pen Test Partners have fixed the digital vulnerability on the Boeing aircraft systems that could allow the hackers to run malicious code.<\/p>\n","protected":false},"author":1,"featured_media":25674,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[399,6761],"tags":[3016,392,79,2030,248,7122,7119,7123,7121,7124,81,7120],"class_list":{"0":"post-25673","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-featured","8":"category-news","9":"tag-aerospace-industry","10":"tag-airlines-news","11":"tag-aviation","12":"tag-aviation-a2z-news","13":"tag-boeing","14":"tag-boeing-digital","15":"tag-boeing-digital-vulnerability","16":"tag-boeing-sbs","17":"tag-boeing-software-hack","18":"tag-digital-vulnerability-on-boeing-aircraft-system","19":"tag-latest-aviation-news","20":"tag-pen-test-partners-boeing"},"_links":{"self":[{"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/posts\/25673","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/comments?post=25673"}],"version-history":[{"count":2,"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/posts\/25673\/revisions"}],"predecessor-version":[{"id":25678,"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/posts\/25673\/revisions\/25678"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/media\/25674"}],"wp:attachment":[{"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/media?parent=25673"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/categories?post=25673"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aviationa2z.com\/index.php\/wp-json\/wp\/v2\/tags?post=25673"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}