ABB T-MAC Plus Vulnerabilities Addressed by ABB
ABB has addressed vulnerabilities in the ABB T-MAC Plus, including file disclosure, broken access controls, and stored cross-site scripting. The company recommends applying the update at the earliest convenience to ensure adequate protection for customers.
Intelligence analysis by Llama
ABB has released an update to address vulnerabilities in the ABB T-MAC Plus, including file disclosure, broken access controls, and stored cross-site scripting. The update is available for the affected product versions, and customers are recommended to apply it at the earliest convenience.
ABB has fixed some security problems in their T-MAC Plus system. These problems could have let hackers get into the system and do bad things. ABB has released an update to fix these problems, and they recommend that customers apply the update as soon as possible to keep their system safe.
Analysis
ABB T-MAC Plus Vulnerabilities Addressed by ABB
ABB has become aware of vulnerabilities in the ABB T-MAC Plus, including file disclosure, broken access controls, and stored cross-site scripting. The company has released an update to address these vulnerabilities, which are present in the affected product versions.
The vulnerabilities, identified as CVE-2025-14771, CVE-2025-14772, and CVE-2025-14773, could potentially compromise the system, allowing an attacker to exfiltrate files, perform administrative operations, or execute arbitrary HTML or JavaScript code. The update is available for the affected product versions, and customers are recommended to apply it at the earliest convenience to ensure adequate protection.
ABB has investigated these vulnerabilities to provide adequate protection to customers. The problem is corrected in the following product versions: T-MAC Plus version 4.0-25. ABB recommends that customers apply the update at earliest convenience.
The misconfigurations on the IIS server, which were reported to security auditing, have been corrected. File Browsing Feature was enabled on that IIS server. That feature along with the default IIS site has been removed.
Workarounds are specific measures that a user can take to help block an attack, for example, temporarily disabling the vulnerable feature may remove the exposure with well-known impact on functionality. ABB has tested the following workarounds. Although these workarounds will not correct the underlying vulnerability, they can help block known attack vectors. When a workaround reduces functionality, this is identified below as “Impact of workaround”.
The update is crucial for customers to ensure adequate protection and prevent potential attacks. The addressed vulnerabilities could potentially compromise the system, allowing an attacker to exfiltrate files, perform administrative operations, or execute arbitrary HTML or JavaScript code.
Key points
- ABB has addressed vulnerabilities in the ABB T-MAC Plus, including file disclosure, broken access controls, and stored cross-site scripting.
- The company recommends applying the update at the earliest convenience to ensure adequate protection for customers.
- The update is available for the affected product versions, and customers are recommended to apply it at the earliest convenience.
- The addressed vulnerabilities could potentially compromise the system, allowing an attacker to exfiltrate files, perform administrative operations, or execute arbitrary HTML or JavaScript code.
If the update is applied successfully, customers can rest assured that their ABB T-MAC Plus system is protected from potential attacks. The update will also prevent hackers from exploiting the vulnerabilities, ensuring the system's integrity and security.
If the update is not applied promptly, customers may be vulnerable to attacks that exploit the addressed vulnerabilities. This could lead to system compromise, data exfiltration, or unauthorized access, resulting in potential financial losses and reputational damage.
