What’s Vulnerable › Vulnerabilities
CVE-2025-1727: End-of-Train and Head-of-Train Remote Linking Protocol Weak Authentication
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2025-07-10 · updated 2026-06-17
- Weakness: CWE-1390
Description
The protocol used for remote linking over RF for End-of-Train and Head-of-Train (also known as a FRED) relies on a BCH checksum for packet creation. It is possible to create these EoT and HoT packets with a software defined radio and issue brake control commands to the EoT device, disrupting operations or potentially overwhelming the brake systems.
Affected products
- End-of-Train and Head-of-Train remote linking protocol: all versions
References
Get alerted when CVE-2025-1727 or the next vulnerability affects your stack