Hackers Show How to Take Over Boeing 737 Avionics via a Simple Bus Override

Researchers have demonstrated a practical attack on Boeing 737 avionics by exploiting a vulnerability in the ARINC 429 protocol. This digital bus is used in virtually all modern airliners to connect safety-critical components, but its design turns out to be less secure than previously assumed.

ARINC 429 differs from many common protocols in that it allows only a single transmitter on a given data line. This was thought to prevent transmission-override attacks, because an attacker would need to physically replace a legitimate transmitter — such as a flight management computer (FMC) — which is a daunting task in a certified aircraft. However, the researchers discovered that ARINC 429 transmitters are placed behind a pair of 37.5-ohm resistors. By transmitting on the same line, an attacker's device can simply overpower the legitimate transmitter's signal, effectively overriding it without touching the original hardware.

To prove the concept, the team built a test bench using components commonly found on Boeing 737 aircraft: a GE 2907A4 flight management computer (FMC), a GE 577F1 multipurpose control and display unit (MCDU), and an Integrated Flight Systems Accessory Unit (IFSAU). These were wired together exactly as they would be on a real 737. The FMC communicates with the pilot's MCDU over ARINC 429 — the MCDU is the interface pilots use to program the autopilot, perform takeoff calculations, and manage flight plans.

After analyzing the protocol traffic between the FMC and MCDU, the researchers were able to freeze the pilot's display, overwrite its contents, and even change the values that the system receives and displays. The attack does not require physical access to the FMC — it is enough to connect to the same ARINC 429 bus. This means a potential attacker could interfere with autopilot settings or feed false data to the pilot for critical calculations, posing a serious threat to flight safety. The researchers emphasize that the vulnerability is inherent to the ARINC 429 protocol design itself, not a specific implementation flaw, making it relevant to many aircraft types beyond the Boeing 737.