Which versions of ABB T-MAC Plus are affected by CVE-2025-14774?

ABB T-MAC Plus firmware version 4.0-24 contains an authorization bypass vulnerability (CVE-2025-14774) allowing adjacent-network attackers to perform unauthorized actions that compromise device…

How to fix or mitigate CVE-2025-14774?

Within 24 hours: Inventory all T-MAC Plus deployments and identify systems running firmware 4.0-24; assess network topology and adjacent-network connectivity; contact ABB support for current advisory and available mitigations. Within 7 days: Implement network segmentation (VLANs and ACLs) restricting adjacent-network access to affected T-MAC Plus devices; document all vulnerable assets in configuration management. Within 30 days: Monitor ABB security advisory for patch release; evaluate firmware upgrade paths or device replacement options; establish formal compensating control documentation and schedule monitoring reviews.

ABB T-MAC Plus CVE-2025-14774

Q: What is the CVSS score of CVE-2025-14774?

CVE-2025-14774 has a CVSS 4.0 base score of 7.2 (High). CVSS vector: CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2025-210047 HIGH

Incorrect Authorization (CWE-863)

2026-06-03 ABB

GHSA-rpj2-8q6r-rm58

Abb Authentication Bypass T Mac Plus

7.2

CVSS 4.0 · Vendor: ABB

Severity by source

Vendor (ABB) PRIMARY

7.2 HIGH

CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (ABB) · only source for this CVE.

CVSS VectorVendor: ABB

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Updated

Jun 03, 2026 - 11:28 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 03, 2026 - 11:27 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 03, 2026 - 11:22 vuln.today

cvss_changed

CVSS changed

Jun 03, 2026 - 11:22 NVD

7.4 (HIGH) 7.2 (HIGH)

Analysis Generated

Jun 03, 2026 - 11:01 vuln.today

DescriptionCVE.org

Incorrect Authorization vulnerability in ABB T-MAC Plus.

This issue affects T-MAC Plus: 4.0-24.

AnalysisAI

Authorization bypass in ABB T-MAC Plus version 4.0-24 allows adjacent-network attackers to perform unauthorized actions that compromise device integrity and availability without any credentials or user interaction. The flaw is an incorrect authorization weakness (CWE-863) carrying a CVSS 4.0 score of 7.2, and no public exploit identified at time of analysis. ABB itself disclosed the issue and published an advisory describing the affected firmware.

Technical ContextAI

T-MAC Plus is an ABB industrial measurement/automation device commonly deployed in operational technology (OT) and industrial control environments. CWE-863 (Incorrect Authorization) indicates that the device performs an authorization check but reaches the wrong conclusion - typically permitting actions a user or peer should not be allowed to take, rather than failing to check authorization entirely (which would be CWE-862). The CPE string cpe:2.3:a:abb:t-mac_plus identifies the affected firmware/application running on the device, and the CVSS attack vector of Adjacent (AV:A) indicates the flaw is reachable from the same logical Layer-2/Bluetooth/limited broadcast segment the device sits on, consistent with how field devices are typically networked.

RemediationAI

Patch availability is not explicitly enumerated in the provided intelligence - consult the ABB advisory at https://search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840&LanguageCode=en&DocumentPartId=&Action=Launch for the fixed firmware version and apply it during the next maintenance window using ABB's documented upgrade procedure. Until the patch is deployed, restrict logical network access to T-MAC Plus devices by placing them on a dedicated OT VLAN behind a firewall or data diode, enforce ISA/IEC 62443 zone-and-conduit segmentation so only engineering workstations on the same trusted segment can reach the device (trade-off: legitimate adjacent management tools must be allow-listed), and enable monitoring on the OT segment to alert on unexpected configuration or command traffic to the device (trade-off: increases SOC noise but provides detection in the absence of a patch). Avoid exposing the device to general corporate or wireless segments where attackers could gain adjacent-network reachability.