CVE-2025-7024

Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory. This issue affects TETRA connectivity Server: 7.0. Vulnerability fix is available and delivered to impacted customers.

Score
CVSS 3.1 7.3 High
Status
Analyzed - cert@airbus.com
Published
2026-04-03
Last modified
2026-04-03
Weaknesses
CWE-276

Affected products

References