Coin-sized device can hack a Boeing 737’s Flight Management Computer, mess with takeoff weights, or even divert an aircraft — gadget connects to an easily accessible port that overrides commands from the pilots, uses in-flight Wi-Fi

Researchers at the University of California San Diego and Oberlin College have created a coin-sized device capable of hacking a Boeing 737's Flight Management Computer (FMC) and potentially causing significant harm to the aircraft. This small gadget plugs into an easily accessible port in the plane, allowing it to override signals between the MCDU and FMC, which control navigation, autopilot, and performance calculations.

The researchers discovered this vulnerability while exploring potential aircraft hacking methods, originally inspired by their work in car hacking. They found that the port, typically used for testing and diagnostics, is not protected, making it accessible to anyone authorized to work on or around the aircraft. The device can also connect to in-flight Wi-Fi, enabling remote control of the plane's systems.

The researchers were able to alter data such as outside air temperature and aircraft weight, which could affect takeoff performance and lead to accidents. This threat is significant because incidents of mistyped takeoff weight have caused tail strikes and crashes in the past. However, the industry has implemented stricter measures to prevent such incidents, such as independent computations and warnings.

Additionally, the attackers can silently change the flight plan, causing the aircraft to divert without the pilots' knowledge. While Boeing claims that the aircraft's systems provide sufficient protection, the researchers suggest permanent port blocking, improved electrical system isolation, and cryptography to prevent such attacks.