CVE-2025-14771 | Files or directories accessible to external parties vulnerab… | CVSS 9.9 CRITICAL

Description

Files or directories accessible to external parties vulnerability in ABB T-MAC Plus. This issue affects T-MAC Plus: 4.0-24.

CVE ID: CVE-2025-14771
State: PUBLISHED
Assigner: ABB
Reserved: 2025-12-16 03:47 UTC
Published: 2026-06-03 09:16 UTC
Last updated: 2026-06-03 13:02 UTC
Primary CWE: CWE-552
CWE-552 Files or directories accessible to external parties
Vendor / Product: ABB / T-MAC Plus
Sources: cve.org · NVD

9.9 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Affected products (1)

Vendor	Product	Platform	Versions
ABB	T-MAC Plus	—	4.0-24

Weakness (CWE)

CWE	Source	Description
CWE-552	cna	CWE-552 Files or directories accessible to external parties

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
7.3	HIGH	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:H/SC:H/SI:L/SA:H

References (1)