ABB T-MAC Plus vulnerabilities

ABB T-MAC Plus version 4.0-24 contains a vulnerability allowing external parties to access files or directories.

ABB T-MAC Plus version 4.0-24 suffers from an incorrect authorization vulnerability, allowing a user to access functions or data they should not be permitted to.

ABB T-MAC Plus version 4.0-24 is vulnerable to cross-site scripting (XSS) due to improper neutralization of input during web page generation. An attacker can inject malicious scripts that execute in the victim's browser.

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus version 4.0-24.