Lucene search
K

13 matches found

CVE
CVE
added 2026/04/03 7:30 a.m.4 views

CVE-2025-7024

CVE-2025-7024 affects AIRBUS PSS TETRA Connectivity Server on Windows Server. The issue is an Incorrect Default Permissions vulnerability in the TETRA Connectivity Server, enabling a local attacker to place a crafted file in a vulnerable directory to execute arbitrary code with SYSTEM privileges ...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/03 7:30 a.m.0 views

CVE-2025-7024

Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory. This issue affects...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/03 7:30 a.m.18 views

CVE-2025-7024 Local privilege escalation in Windows Server OS through installed Tetra Connectivity Server (TCS)

Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory. This issue affects...

8.6CVSS0.00012EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/03 7:30 a.m.2 views

CVE-2025-7024 Local privilege escalation in Windows Server OS through installed Tetra Connectivity Server (TCS)

Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a crafted file into the vulnerable directory. This issue affects...

8.6CVSS6.3AI score0.00012EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/03 12:0 a.m.3 views

Airbus AIRBUS PSS TETRA Connectivity Server 安全漏洞

Airbus AIRBUS PSS TETRA Connectivity Server is a communication software developed by Airbus. Version 7.0 of Airbus AIRBUS PSS TETRA Connectivity Server contains a security vulnerability. This vulnerability stems from improper default permission settings, which may lead to unauthorized access and...

8.6CVSS6.1AI score0.00012EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/03 12:0 a.m.0 views

PT-2026-29994

Name of the Vulnerable Software and Affected Versions AIRBUS PSS TETRA Connectivity Server version 7.0 Description A flaw exists in AIRBUS PSS TETRA Connectivity Server on Windows Server OS that could allow an attacker to execute arbitrary code with SYSTEM privileges if a user is tricked into...

8.6CVSS6.2AI score0.00012EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/12/16 2:49 p.m.2 views

CVE-2025-34180

NetSupport Manager 14.12.0001 relies on a shared Gateway Key for authentication between Manager/Control, Client, and Connectivity Server components. The key is stored using a reversible encoding scheme. An attacker who obtains access to a deployed client configuration file can decode the stored...

8.4CVSS7AI score0.00024EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/15 3:30 p.m.4 views

EUVD-2025-203382

NetSupport Manager 14.12.0001 contains an unauthenticated SQL injection vulnerability in its Connectivity Server/Gateway HTTPS request handling. The server evaluates request URIs using an unsanitized SQLite query against the FileLinks table in gateway.db. By injecting SQL through the LinkName/URI...

8.7CVSS7.4AI score0.00116EPSS
Exploits0References5
NVD
NVD
added 2025/12/15 3:15 p.m.2 views

CVE-2025-34181

NetSupport Manager 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write files to arbitrary locations on the server...

8.7CVSS0.00834EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/15 2:42 p.m.1 views

CVE-2025-34181 NetSupport Manager < 14.12.0001 Authenticated Path Traversal Arbitrary File Write RCE

NetSupport Manager 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write files to arbitrary locations on the server...

8.7CVSS7.8AI score0.00834EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.1 views

NetSupport Manager 安全漏洞

NetSupport Manager is a remote control software from NetSupport Manager, Inc. A security vulnerability exists in NetSupport Manager versions prior to 14.12.0001, which stems from an unauthenticated SQL injection in Connectivity Server/Gateway HTTPS request processing, which could lead to the...

8.7CVSS7.5AI score0.00116EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/12/15 12:0 a.m.5 views

PT-2025-51233

NetSupport Manager 14.12.0001 contains an arbitrary file write vulnerability in its Connectivity Server/Gateway PUTFILE request handler. An attacker with a valid Gateway Key can supply a crafted filename containing directory traversal sequences to write files to arbitrary locations on the server...

8.7CVSS8.2AI score0.00834EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.1 views

NetSupport Manager 安全漏洞

NetSupport Manager is a remote control software from NetSupport Manager, Inc. A security vulnerability exists in NetSupport Manager versions prior to 14.12.0001 that stems from the presence of an arbitrary file write in the Connectivity Server/Gateway PUTFILE request handler, which could lead to...

8.7CVSS7.9AI score0.00834EPSS
Exploits0References4
Rows per page
Query Builder