Authorization Bypass Vulnerability in ABB T-MAC Plus

CVE-2025-14772

What is CVE-2025-14772?

An authorization bypass vulnerability has been identified in ABB T-MAC Plus, allowing user-controlled keys to circumvent intended security mechanisms. This flaw enables unauthorized users to gain access to restricted functionalities within the affected product, potentially leading to unauthorized command execution and data exposure. Users of T-MAC Plus versions 4.0-24 are particularly at risk. It is crucial for organizations to patch this vulnerability to safeguard their operations and sensitive information.

References