Researchers demonstrate coin-sized device that reportedly hacks Boeing 737 Flight Management Computer via diagnostic port and in-flight Wi-Fi

The vulnerability stems from an exposed diagnostic port in the Boeing 737’s Electronics and Equipment bay, which connects directly to the communication bus between the Flight Management Computer (FMC) and the Multipurpose Control Display Unit (MCDU). This port, typically used for maintenance, lacks physical or digital authentication, allowing a coin-sized device to intercept and inject data. The attack surface is compounded by the device’s ability to connect to in-flight Wi-Fi, enabling remote exploitation without physical access to the aircraft during flight.

The immediate risk lies in the manipulation of critical flight parameters. By spoofing air temperature or aircraft weight, the device could cause the FMC to calculate incorrect takeoff power settings, potentially leading to tail strikes or failed takeoffs. Historical incidents, such as the 2004 MK Airlines crash, demonstrate the catastrophic outcomes of misconfigured weight data. While modern aircraft have implemented safeguards like independent electronic flight bag computations, the exploit bypasses these by directly altering the source data before it reaches the cockpit displays.

The attack’s feasibility is constrained by existing safety layers. Pilots are trained to cross-check FMC data with other instruments, and air traffic control can intervene if an aircraft deviates from its assigned route. However, the exploit’s ability to make subtle, incremental changes, such as altering a flight plan over time, could evade detection until it’s too late. The reliance on Wi-Fi also introduces latency and potential interference, which may limit the attack’s real-time effectiveness but does not eliminate the risk entirely.

From an engineering perspective, the exploit underscores the need to re-evaluate legacy hardware interfaces in critical systems. Diagnostic ports, designed for convenience, often lack modern security controls like encryption or access logging. Retrofitting these ports with authentication or physical locks could mitigate the risk, but such changes may be costly and disruptive to maintenance workflows. The incident also raises questions about the security of other industrial systems that rely on similar diagnostic buses, such as maritime or rail networks.