Which versions of ABB T-MAC Plus are affected by CVE-2025-14771?

ABB T-MAC Plus version 4.0-24 contains a file access vulnerability (CVE-2025-14771) that allows authenticated users to bypass authorization controls and access resources beyond their intended…

How to fix or mitigate CVE-2025-14771?

Within 24 hours: Inventory all ABB T-MAC Plus systems and confirm version 4.0-24 deployment. Within 7 days: Implement network segmentation to limit authenticated user access to only required resources, enforce principle of least privilege, and enable comprehensive logging of file access attempts. Within 30 days: Apply vendor patch immediately upon release, or deploy supplemental access controls (file permission hardening, directory encryption) if patch remains unavailable.

ABB T-MAC Plus CVE-2025-14771

Q: What is the CVSS score of CVE-2025-14771?

CVE-2025-14771 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2025-210050 HIGH

Files or Directories Accessible to External Parties (CWE-552)

2026-06-03 ABB

GHSA-287w-267v-h5rm

Information Disclosure Abb Path Traversal T Mac Plus

7.3

CVSS 4.0 · Vendor: ABB

Severity by source

Vendor (ABB) PRIMARY

7.3 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (ABB) · only source for this CVE.

CVSS VectorVendor: ABB

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Jun 03, 2026 - 11:30 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 03, 2026 - 11:30 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 03, 2026 - 11:22 vuln.today

cvss_changed

Severity Changed

Jun 03, 2026 - 11:22 NVD

CRITICAL HIGH

CVSS changed

Jun 03, 2026 - 11:22 NVD

9.9 (CRITICAL) 7.3 (HIGH)

Analysis Generated

Jun 03, 2026 - 11:00 vuln.today

DescriptionCVE.org

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

AnalysisAI

Unauthorized file or directory access in ABB T-MAC Plus version 4.0-24 allows authenticated remote attackers to read, modify, or otherwise interact with resources that should not be externally reachable, with CVSS 4.0 scoring 7.3 due to high confidentiality and availability impact plus scope change to subsequent systems. The flaw is classified under CWE-552 (Files or Directories Accessible to External Parties) and was disclosed by ABB itself. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV.

Technical ContextAI

T-MAC Plus is an ABB industrial/utility metering and control product family, and the vulnerability falls under CWE-552, which covers cases where files or directories intended to be internal are inadvertently exposed to external parties - typically through missing path-canonicalization, weak access-control on a web or service endpoint, or overly permissive resource handlers. The 'Path Traversal' tag combined with CWE-552 strongly suggests the affected component serves files via a network-facing interface where input is not properly normalized against a trusted base directory, enabling out-of-bounds resource access. The single CPE (cpe:2.3:a:abb:t-mac_plus) confirms the issue is product-specific rather than a shared library flaw.

RemediationAI

Consult the ABB advisory (document 9AKK108472A7840 at https://search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840) for the vendor-recommended fixed release, as no specific patched version string was provided in the source data - patch status is therefore 'Patch available per vendor advisory' rather than a confirmed exact version. Until upgrade is applied, restrict network reachability of the T-MAC Plus management/service interface to a dedicated OT management VLAN and require jump-host access, since the vulnerability needs at least low-privileged authenticated access (PR:L) and a network path; tighten account hygiene by removing shared low-privilege accounts and enforcing per-user credentials with MFA where the platform supports it; and place the device behind an ICS-aware firewall or data diode that can constrain outbound impact, accepting the trade-off that strict segmentation may complicate remote engineering workflows.