CVE-2025-7024 in PSS TETRA Connectivity Server
Summary
Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse.
An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory.
This issue affects TETRA connectivity Server: 7.0.
Vulnerability fix is available and delivered to impacted customers.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Responsible
airbus
Reservation
07/02/2025
Disclosure
04/03/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 355082 | Airbus PSS TETRA Connectivity Server File default permission | 276 | Not defined | Official fix | CVE-2025-7024 |