« Back to list

ABB

ABB T-mac Plus: vulnerabilities and CVEs

ABB T-mac Plus has 4 published vulnerabilities, 4 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs4
Last 12 months4
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2025-14774High (7.2)0.18%—Jun 3, 2026
Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
CVE-2025-14773High (7.2)0.18%—Jun 3, 2026
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
CVE-2025-14772High (7.3)0.29%—Jun 3, 2026
Authorization bypass through User-Controlled key vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.
CVE-2025-14771High (7.3)0.35%—Jun 3, 2026
Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

🎯 How it gets exploited (ATT&CK techniques)

  1. T1210 Exploitation of Remote Services3
  2. T1078 Valid Accounts2
  3. T1005 Data from Local System1
  4. T1059.007 JavaScript1
  5. T1189 Drive-by Compromise1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by ABB