CVE-2025-14774
HighCVSS 7.4Exploitation Probability (EPSS)
Low risk8th percentile - higher than 8% of all known CVEs
Summary
ABB T-MAC Plus version 4.0-24 suffers from an incorrect authorization vulnerability, allowing a user to access functions or data they should not be permitted to.
Risk Assessment
An unauthorized user may gain access to sensitive functions or data within the T-MAC Plus system, potentially compromising integrity and confidentiality.
Recommendation
Update ABB T-MAC Plus to the latest version that includes an authorization fix. Perform a user permission audit.
Other vulnerabilities in ABB T-MAC Plus
See all- CVE-2025-14771Critical
ABB T-MAC Plus version 4.0-24 contains a vulnerability allowing external parties to access files or directories.
- CVE-2025-14773High
ABB T-MAC Plus version 4.0-24 is vulnerable to cross-site scripting (XSS) due to improper neutralization of input during web page generation. An attacker can inject malicious scripts that execute in the victim's browser.
- CVE-2025-14772High
Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus version 4.0-24.
Original NVD description (English source)
Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.