CVE-2025-14771Disclosure(abb / t-mac_plus)

LOWCVSS 7.3 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch abb t-mac_plus systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

abb CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://search.abb.com/library/Download.aspx?DocumentID=9AKK108472A7840&LanguageCode=en&DocumentPartId=&Action=Launch

Weakness type (CWE)

CWE-552

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

t-mac_plus

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-06-03); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

abb

Products

t-mac_plus

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-03	1	Disclosure1
2026-06-07	1	Disclosure1
2026-07-14	1	Patch1

Full discourse3 posts

Windows Forum@windowsforum96d
Patch
🪟 ABB’s T-MAC Plus could leak files and let low-privilege users act like admins—because “least privilege” apparently took the day off. Upgrade to 4.0-25 before logistics become chaos. https://windowsforum.com/threads/cve-2025-14771-upgrade-abb-t-mac-plus-to-4-0-25.438121/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #CriticalInfrastructure #IndustrialCybersecurity #AbbTMacPlus https://t.co/0xEnybeWhW
Post summary
The tweet warns of a CVE‑2025‑14771 in ABB T‑MAC Plus that could enable low‑privilege users to leak files and gain admin rights, and urges users to upgrade to version 4.0‑25 to mitigate the risk.
01011106
1.4K followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters133d
Disclosure
CVE-2025-14771 Critical supply chain attack in ABB T-MAC Plus v4.0-24. CVSS 9.9. Unpatched—immediate mitigation required. #CVE #ICS #cybersecurity #CVEAlert More FREE UPDATES: https://www.valtersit.com/cve/CVE-2025-14771
Post summary
The post announces a new critical supply chain vulnerability (CVE‑2025‑14771) in ABB T‑MAC Plus, noting its high CVSS score and the need for immediate mitigation, but offers no patch, PoC or exploit details.
0000051
919 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds137d
Disclosure
CVE-2025-14771 Unauthorized External Access to Files and Directories in ABB T-MAC Plus 4.0-24 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-14771
Post summary
The content announces a new vulnerability (CVE-2025-14771) in ABB T‑MAC Plus, providing a title and a link to details but no PoC, exploit code, active exploitation, or patch information.
0000044
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	abb	t-mac_plus	4.0-24	-	-

Explore more

Back to dashboard abb CVEs t-mac_plus vulnerabilities

What researchers are saying

CVE-2025-14771

Windows Forum[verified]@windowsforumPatch

The tweet warns of a CVE‑2025‑14771 in ABB T‑MAC Plus that could enable low‑privilege users to leak files and gain admin rights, and urges users to upgrade to version 4.0‑25 to mitigate the risk.

Hugo | DevOps | Cybersecurity 🇱🇻[verified]@HugoValtersDisclosure

The post announces a new critical supply chain vulnerability (CVE‑2025‑14771) in ABB T‑MAC Plus, noting its high CVSS score and the need for immediate mitigation, but offers no patch, PoC or exploit details.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The content announces a new vulnerability (CVE-2025-14771) in ABB T‑MAC Plus, providing a title and a link to details but no PoC, exploit code, active exploitation, or patch information.