CVE-2025-7024mediumCWE-276

CVE-2025-7024: medium-severity vulnerability in AIRBUS TETRA Connectivity Server (TCS)

Local privilege escalation in Windows Server OS through installed Tetra Connectivity Server (TCS)

Published

Follow this CVE+ Monitor TETRA Connectivity Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.6epss 0.1%
Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory. This issue affects TETRA connectivity Server: 7.0. Vulnerability fix is available and delivered to impacted customers.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
Affected products
AIRBUS · TETRA Connectivity Server (TCS)