Incorrect Authorization in ABB T-MAC Plus

Publication date: 2026-06-03

Last updated on: 2026-06-04

Assigner: Asea Brown Boveri Ltd. (ABB)

Description

Incorrect Authorization vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-03

Last Modified

2026-06-04

Generated

2026-07-14

AI Q&A

2026-06-03

EPSS Evaluated

2026-07-12

NVD

CVE-2025-14774

EUVD

EUVD-2025-210047

Affected Vendors & Products

Vendor	Product	Version / Range
abb	t-mac_plus	4.0-24

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability is an Incorrect Authorization issue found in ABB T-MAC Plus version 4.0-24. Incorrect Authorization means that the system does not properly verify whether a user or process has the correct permissions to perform certain actions, potentially allowing unauthorized activities.

Impact Analysis

The vulnerability can lead to unauthorized actions being performed on the affected system, which may result in disruption or damage. According to the CVSS v3.1 score, it has a high impact on availability, meaning it could cause denial of service or other availability issues, although confidentiality and integrity are not directly impacted.

Hi! I’m here to help you understand CVE-2025-14774. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70