CVE-2025-7024
Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory. This issue affects TETRA connectivity Server: 7.0. Vulnerability fix is available and delivered to impacted customers.
- Score
- CVSS 3.1 7.3 High
- Status
- Analyzed - cert@airbus.com
- Published
- 2026-04-03
- Last modified
- 2026-04-03
- Weaknesses
- CWE-276
Affected products
References
- https://cwe.mitre.org/data/definitions/276.html