CVE-2025-7024 | Airbus PSS TETRA Connectivity Server 7.0 on Windows File default permission

VDB-355082 · CVE-2025-7024 · GCVE-0-2025-7024 AIRBUS PSS TETRA CONNECTIVITY SERVER 7.0 ON WINDOWS FILE DEFAULT PERMISSION HISTORYDIFFRELATEJSONXMLCTI CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score 7.4 $0-$5k 0.28+ Summaryinfo A vulnerability classified as critical was found in Airbus PSS TETRA Connectivity Server 7.0 on Windows. This affects an unknown part of the component File Handler. Such manipulation leads to default permission. This vulnerability is uniquely identified as CVE-2025-7024. Local access is required to approach this attack. No exploit exists. Upgrading the affected component is advised. Detailsinfo A vulnerability was found in Airbus PSS TETRA Connectivity Server 7.0 on Windows and classified as critical. Affected by this issue is an unknown function of the component File Handler. The manipulation with an unknown input leads to a default permission vulnerability. Using CWE to declare the problem leads to CWE-276. During installation, installed file permissions are set to allow anyone to modify those files. Impacted is confidentiality, integrity, and availability. CVE summarizes: Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory. This issue affects TETRA connectivity Server: 7.0. Vulnerability fix is available and delivered to impacted customers. The weakness was disclosed by Erkan Ekici. This vulnerability is handled as CVE-2025-7024 since 07/02/2025. The exploitation is known to be easy. Local access is required to approach this attack. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1222 by the MITRE ATT&CK project. Upgrading to version 8.0 or 9.0 eliminates this vulnerability. Productinfo Vendor Airbus Name PSS TETRA Connectivity Server Version 7.0 CPE 2.3info 🔒 CPE 2.2info 🔒 CVSSv4info VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA CVSS-B Score: 🔒 CNA CVSS-BT Score: 🔒 CNA Vector: 🔒 CVSSv3info VulDB Meta Base Score: 7.6 VulDB Meta Temp Score: 7.4 VulDB Base Score: 7.8 VulDB Temp Score: 7.5 VulDB Vector: 🔒 VulDB Reliability: 🔍 CNA Base Score: 7.3 CNA Vector (airbus): 🔒 CVSSv2info Vector Complexity Authentication Confidentiality Integrity Availability Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock Unlock VulDB Base Score: 🔒 VulDB Temp Score: 🔒 VulDB Reliability: 🔍 Exploitinginfo Class: Default permission CWE: CWE-276 / CWE-266 CAPEC: 🔒 ATT&CK: 🔒 Physical: Partially Local: Yes Remote: Partially Availability: 🔒 Status: Not defined Price Prediction: 🔍 Current Price Estimation: 🔒 0-Day Unlock Unlock Unlock Unlock Today Unlock Unlock Unlock Unlock Threat Intelligenceinfo Interest: 🔍 Active Actors: 🔍 Active APT Groups: 🔍 Countermeasuresinfo Recommended: Upgrade Status: 🔍 0-Day Time: 🔒 Upgrade: PSS TETRA Connectivity Server 8.0/9.0 Timelineinfo 07/02/2025 CVE reserved 04/03/2026 +275 days Advisory disclosed 04/03/2026 +0 days VulDB entry created 04/03/2026 +0 days VulDB entry last update Sourcesinfo Researcher: Erkan Ekici Status: Confirmed CVE: CVE-2025-7024 (🔒) GCVE (CVE): GCVE-0-2025-7024 GCVE (VulDB): GCVE-100-355082 Entryinfo Created: 04/03/2026 09:57 Changes: 04/03/2026 09:57 (78) Complete: 🔍 Cache ID: 99:75E:101 Discussion No comments yet. Languages: en. Please log in to comment. ◂ PreviousOverviewNext ▸