CVE-2025-7024mediumCWE-276

CVE-2025-7024: fallo de gravedad media en AIRBUS TETRA Connectivity Server (TCS)

Local privilege escalation in Windows Server OS through installed Tetra Connectivity Server (TCS)

Publicada el

Seguir esta CVE+ Monitorear TETRA Connectivity Server

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 5.6epss 0.1%
Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory. This issue affects TETRA connectivity Server: 7.0. Vulnerability fix is available and delivered to impacted customers.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U
Productos afectados
AIRBUS · TETRA Connectivity Server (TCS)