CVE-2025-14772
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus version 4.0-24.
Risk Assessment
Risk of unauthorized access to functions or data, potentially compromising system integrity.
Recommendation
Contact ABB for a patch or software update.
Other vulnerabilities in ABB T-MAC Plus
See all- CVE-2025-14771Critical
ABB T-MAC Plus version 4.0-24 contains a vulnerability allowing external parties to access files or directories.
- CVE-2025-14774High
ABB T-MAC Plus version 4.0-24 suffers from an incorrect authorization vulnerability, allowing a user to access functions or data they should not be permitted to.
- CVE-2025-14773High
ABB T-MAC Plus version 4.0-24 is vulnerable to cross-site scripting (XSS) due to improper neutralization of input during web page generation. An attacker can inject malicious scripts that execute in the victim's browser.
Original NVD description (English source)
Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.