PT-2026-29994 · Airbus · Tetra Connectivity Server

Erkan Ekici · Published 2026-04-03 · Updated 2026-04-03 · CVE-2025-7024

NVD

CVSS v3.1

7.3

High

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse.

An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory.

This issue affects TETRA connectivity Server: 7.0.

Vulnerability fix is available and delivered to impacted customers.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-7024

Affected Products

Tetra Connectivity Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2025-7024 · Security Note
• https://cwe.mitre.org/data/definitions/276.html · Note