CVE-2025-14771
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk27th percentile - higher than 27% of all known CVEs
Summary
ABB T-MAC Plus version 4.0-24 contains a vulnerability allowing external parties to access files or directories.
Risk Assessment
Risk of unauthorized access to sensitive files and directories of the T-MAC Plus system.
Recommendation
Update ABB T-MAC Plus to a version containing the security fix.
Other vulnerabilities in ABB T-MAC Plus
See all- CVE-2025-14774High
ABB T-MAC Plus version 4.0-24 suffers from an incorrect authorization vulnerability, allowing a user to access functions or data they should not be permitted to.
- CVE-2025-14773High
ABB T-MAC Plus version 4.0-24 is vulnerable to cross-site scripting (XSS) due to improper neutralization of input during web page generation. An attacker can inject malicious scripts that execute in the victim's browser.
- CVE-2025-14772High
Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus version 4.0-24.
Original NVD description (English source)
Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS