Which versions of ABB T-MAC Plus are affected by CVE-2025-14772?

ABB T-MAC Plus version 4.0-24 contains an authorization bypass vulnerability (IDOR) that allows authenticated users to access and modify other users' resources, creating significant data breach and…

How to fix or mitigate CVE-2025-14772?

Within 24 hours: Inventory all systems running ABB T-MAC Plus 4.0-24 and map exposure to trusted networks. Within 7 days: Implement network-level access restrictions to T-MAC Plus, activate comprehensive audit logging, and contact ABB for patch timeline and interim mitigations. Within 30 days: Monitor ABB security advisories for patch release; develop and test upgrade path to patched version when available.

ABB T-MAC Plus CVE-2025-14772

Q: What is the CVSS score of CVE-2025-14772?

CVE-2025-14772 has a CVSS 4.0 base score of 7.3 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2025-210051 HIGH

Authorization Bypass Through User-Controlled Key (CWE-639)

2026-06-03 ABB

GHSA-vc9h-72v9-5249

Abb Authentication Bypass

7.3

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

7.3 HIGH

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Jun 03, 2026 - 11:30 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 03, 2026 - 11:29 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 03, 2026 - 11:22 vuln.today

cvss_changed

CVSS changed

Jun 03, 2026 - 11:22 NVD

8.8 (HIGH) 7.3 (HIGH)

Analysis Generated

Jun 03, 2026 - 11:00 vuln.today

DescriptionCVE.org

Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

AnalysisAI

Authorization bypass in ABB T-MAC Plus version 4.0-24 allows authenticated remote attackers to access or modify resources belonging to other users by manipulating user-controlled identifiers (IDOR). The flaw scores CVSS 7.3 with high impact to integrity and availability, and no public exploit identified at time of analysis. The vulnerability was reported by the vendor (ABB) itself, indicating coordinated disclosure rather than incident-driven discovery.

Technical ContextAI

ABB T-MAC Plus is an industrial energy and power-quality monitoring/measurement device produced by ABB, typically deployed in operational technology (OT) and electrical-distribution environments. The root cause is CWE-639 (Authorization Bypass Through User-Controlled Key), a class of insecure direct object reference (IDOR) where the application uses an identifier supplied by the requester (such as a numeric record ID, account ID, or resource handle in a URL or parameter) to fetch data without verifying that the requesting session is actually authorized to access that specific object. The CPE 'cpe:2.3:a:abb:t-mac_plus:*' confirms the application-tier T-MAC Plus product is affected, and the CVSS 4.0 vector (AV:N/AC:L/AT:P/PR:L/UI:N) indicates the flaw is reachable over the network by an already-authenticated low-privilege user, with an additional attack requirement (AT:P) suggesting a precondition such as knowing or enumerating another resource identifier.

RemediationAI

Consult the ABB security advisory at https://search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840&LanguageCode=en&DocumentPartId=&Action=Launch for the vendor-recommended fixed firmware or software release; the input data does not contain an independently confirmed fix version, so treat the advisory as the authoritative patch source (patch available per vendor advisory). Until the upgrade can be staged, place T-MAC Plus devices behind a strict network segmentation boundary so that the management interface is reachable only from a dedicated jump host or engineering workstation (trade-off: legitimate remote monitoring workflows will need to traverse the jump host); rotate and restrict low-privilege accounts to the minimum personnel needed, since exploitation requires PR:L access; and enable application-layer logging of object-access requests so anomalous ID enumeration can be detected. Avoid exposing the device's HTTP/management endpoints to corporate or internet networks, which removes the network attack vector entirely at the cost of losing remote access.